[Bro-Dev] [JIRA] (BIT-1159) count/port comparisons silently fail when part of a record

Robin Sommer robin at icir.org
Thu Mar 20 04:22:09 PDT 2014



> Is the original code actually supposed to work?

Yeah, I'm afraid it is ... That has indeed been a legitimate shortcut
since Bro's early versions. However, I wouldn't veto removing it; it
does indeed make some code parts quite a bit more complex, and I don't
think it's a crucial feature to have and rarely used anyways.




More information about the bro-dev mailing list