[Bro-Dev] How to use Broker::Data in an event handler?

Matthias Vallentin vallentin at icir.org
Wed Sep 12 03:24:09 PDT 2018


>     case type Broker::Data as d:
>         print "Broker::Data, expected to be nil", d?$data, d?$data ?
> cat(d$data) : "nil";
>         # or use the same logic from the is_nil() function above

This is the logic I was looking for, thanks! The generic is_nil
function might come in handy some other point.

    Matthias


More information about the bro-dev mailing list