[Bro-Dev] get_event_peer() with Broker

Seth Hall seth at icir.org
Tue Feb 2 08:47:37 PST 2016


> On Feb 1, 2016, at 5:45 PM, Robin Sommer <robin at icir.org> wrote:
> 
> I think adding such meta information would be quite valuable, however
> it's actually not trivial to do that, as it would change the signature
> for incoming events across the whole Broker code base, including
> language bindings etc.
> 
> Any ideas?

I was a little concerned that you'd fine something like this.  Could we just do what I was suggesting last week where we try to see if we can get rid of the need for that?  We don't use the remote peer name for much anyway and I think that it would be good for us if we stopped using it completely.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the bro-dev mailing list