[Bro-Dev] [JIRA] (BIT-1102) Logs use tab delimiter yet do not remove tabs from logged data

Seth Hall (JIRA) jira at bro-tracker.atlassian.net
Thu Dec 5 07:46:45 PST 2013


    [ https://bro-tracker.atlassian.net/browse/BIT-1102?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14910#comment-14910 ] 

Seth Hall commented on BIT-1102:
--------------------------------

Which line in http.log are you specifically referring to?  I don't see any problems with this log.  We specifically handle the case of field separators within fields by hex escaping.

> Logs use tab delimiter yet do not remove tabs from logged data
> --------------------------------------------------------------
>
>                 Key: BIT-1102
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1102
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>    Affects Versions: 2.2
>         Environment: ubuntu 12.04LTS server
>            Reporter: April Lorenzen
>              Labels: http.log
>         Attachments: 4872c1c6d6983c4b6cf4e0f83baf5ec5.pcap
>
>
> The attached pcap processed with bro -r pcapname will demonstrate the issue. View the http.log after processing and note that the field delimiter appears within a field.
> I tried searching the official github mirror but don't know bro well enough to find the spot to look. I'd be happy to work on fixing this if you point me to the problem area (that's the hard part, right?)



--
This message was sent by Atlassian JIRA
(v6.2-OD-03#6206)


More information about the bro-dev mailing list