[Bro-Dev] current_time() vs network_time()

[Seth Hall]

> On Nov 19, 2015, at 6:12 PM, Vern Paxson <vern at icir.org> wrote:
> 
> In any case, I agree that Craig's proposed fix is a good way to deal
> with this.  In addtion, I think this points up the utility of Bro
> providing cron-style event scheduling in addition to relative-time
> scheduling.

I actually have a plugin mostly working that does this called approxidate.  
	https://github.com/sethhall/bro-approxidate

It lets you write code like this...

schedule approxidate("tomorrow at 8pm EDT”) { some_event() };

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/