[Bro-Dev] get_event_peer() with Broker
Seth Hall
seth at icir.org
Tue Feb 2 08:47:37 PST 2016
> On Feb 1, 2016, at 5:45 PM, Robin Sommer <robin at icir.org> wrote:
>
> I think adding such meta information would be quite valuable, however
> it's actually not trivial to do that, as it would change the signature
> for incoming events across the whole Broker code base, including
> language bindings etc.
>
> Any ideas?
I was a little concerned that you'd fine something like this. Could we just do what I was suggesting last week where we try to see if we can get rid of the need for that? We don't use the remote peer name for much anyway and I think that it would be good for us if we stopped using it completely.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
More information about the bro-dev
mailing list