[Bro-Dev] [Bro-Commits] [git/broccoli] topic/jsiwek/broccoli-vectors: Add support for consuming events w/ vector args. (de39868)

Siwek, Jonathan Luke jsiwek at illinois.edu
Tue Dec 3 10:09:12 PST 2013


On Dec 3, 2013, at 11:41 AM, Robin Sommer <robin at icir.org> wrote:

> What's the motivation for adding vector support? Is that needed for
> something specific?

My response to the “some events not received by broccoli” thread on the bro users list should clarify what precipitated it.  Generally, it seems like some common bro types/events will now have vectors in them, and not fixing this could be a common pitfall for users.  It didn’t look like it would take more than a day and a full broccoli replacement could be some time away, so working on it seemed worthwhile.

- Jon


More information about the bro-dev mailing list