[Bro-Dev] #912: Need option for ASCII logging writer to only print CSV header line

Bro Tracker bro at tracker.bro-ids.org
Mon Nov 26 14:17:58 PST 2012


#912: Need option for ASCII logging writer to only print CSV header line
----------------------------+-------------------------------
  Reporter:  carsten        |      Owner:
      Type:  Merge Request  |     Status:  new
  Priority:  Normal         |  Milestone:  Bro2.2
 Component:  Bro            |    Version:  git/master
Resolution:                 |   Keywords:  logging csv ascii
----------------------------+-------------------------------

Comment (by carsten):

 Replying to [comment:10 robin]:
 > Merged (with a bit of adjustments).

 I read the merged source code and I wonder about Ascii.cc, line 124, where
 it says: "invalid value for 'only_single_header_row', must be boolean
 (T/F)"
 Actually, it must not be a boolean, but a string of value "T" or "F". Can
 you change that, please?

 In ascii.bro I'm now missing the following part from my patch, which
 explains what the option really does.
 "The header row is not prepended with "fields", but starts with the field
 name of the first column. Also the field name is not prepended with the
 meta_prefix, i.e. the option meta_prefix is ignored. No opening nor close
 times are written."
 Can you re-add it, please?

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/912#comment:17>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list