[Bro-Dev] #649: Output field separator to bro-cut

Bro Tracker bro at tracker.bro-ids.org
Thu Oct 27 13:14:20 PDT 2011


#649: Output field separator to bro-cut
-----------------------------+------------------------
 Reporter:  vallenti         |      Owner:  robin
     Type:  Feature Request  |     Status:  new
 Priority:  Normal           |  Milestone:  Bro1.6
Component:  Bro              |    Version:  git/master
 Keywords:  bro-cut          |
-----------------------------+------------------------
 It would be nice to have a way to specify an output separator (like OFS in
 awk). This comes in handy, for example, when concatenating URLs from
 `http.log`:
 {{{
 bro-cut -F '' host uri < http.log
 }}}
 The out would then be along the lines of:
 {{{
 host1/index.html
 host2/foo/bar/baz.html
 }}}

 A more verbose way of achieving the same output right now would be:
 {{{
 bro-cut host uri < http.log | awk '{ print $1$2 }'
 }}}

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/649>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list