[Bro-Dev] Broccoli and vectors

Siwek, Jonathan Luke jsiwek at illinois.edu
Thu Dec 5 10:11:17 PST 2013


On Dec 5, 2013, at 11:54 AM, Randy Caldejon <randy at packetchaser.org> wrote:

> I'm implementing an application that sends DNS::Info records via Broccoli to Bro.  However, it appears that Broccoli does not fully support vectors.   Is this correct?   If it does, can somebody point me to an example on how to populate a vector using the Broccoli C API.  I searched through the Broccoli docs but could not find anything.

You’re right, Broccoli does not support sending vectors (though I added support for recv’ing them earlier this week).

A possible workaround for sending vectors via Broccoli may be to send each element individually in an event and have Bro construct the vector on the other side one element at a time.

- Jon


More information about the bro-dev mailing list