[Bro-Dev] Broccoli question

Siwek, Jonathan Luke jsiwek at illinois.edu
Thu Dec 19 15:09:20 PST 2013


On Dec 19, 2013, at 2:49 PM, Randy Caldejon <randy at packetchaser.org> wrote:

> Can somebody tell me if BRO_TYPE_TABLE is supported at part of a record?

Regardless of whether it’s part of a record, I don’t think broccoli can create and send tables (as well as sets/vectors).  You may have to send individual key-value pairs and reconstruct the table on the Bro-side.

- Jon


More information about the bro-dev mailing list