[Bro-Dev] DHCP event removal

Alan Commike commike at reservoir.com
Mon Jun 18 12:09:41 PDT 2018


On Fri, Jun 15, 2018 at 11:38 PM Seth Hall <seth at corelight.com> wrote:

>
> Ugh, I didn't consider that.  Bro has re-reached the point where
> touching any number of things can set off an avalanche of problems like
> this.
>

The other aspect of Bro changes is in the logging format. This comment
isn't specifically tied the DHCP change, but since we're talking about
breaking things....

With the default TSV, any change can break export into the various back-end
log stores and SIEMs. When adding new fields, it would be nice to see them
added to the end of the Info structure.

   ...alan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20180618/42550a5e/attachment.html 


More information about the bro-dev mailing list