[Bro-Dev] [JIRA] (BIT-1435) &read_expire does not work for embedded table

[Liang Zhu (JIRA)]

Liang Zhu created BIT-1435:
------------------------------

             Summary: &read_expire does not work for embedded table
                 Key: BIT-1435
                 URL: https://bro-tracker.atlassian.net/browse/BIT-1435
             Project: Bro Issue Tracker
          Issue Type: Problem
          Components: Bro
            Reporter: Liang Zhu


I have a script read_expire_test.bro containing:

{noformat}
type embedded_table: table[string] of string &read_expire=1sec;
global level2_table: table[string] of embedded_table;
global level1_table: table[string] of string &read_expire=1sec;

event bro_init()
        {
        level2_table["t1"] = table();
        level2_table["t1"]["t2"] = "t2";
        level1_table["t"] = "t";
        print "level2_table:";
        print level2_table;
        print "level1_table:";
        print level1_table;
        }

event bro_done()
        {
        print "----------------";
        print "level2_table:";
        print level2_table;
        print "level1_table:";
        print level1_table;
        }
{noformat}

If I run this script through some trace (just to delay some time and let timeout work),
for example, 

{noformat}
bro --pseudo-realtime -C -r test.pcap read_expire_test.bro
{noformat}

the level1_table is cleaned up as expected. However, the embedded table in level2_table is not cleaned up. By running the script, bro does not give any error message or warning, so I assume &read_expire in the following statement

{noformat}
type embedded_table: table[string] of string &read_expire=1sec;
{noformat}

is supposed to work?





--
This message was sent by Atlassian JIRA
(v6.5-OD-08-001#65007)