[Bro] log_file variable in ftp.bro
Christian Kreibich
christian at whoop.org
Fri Sep 24 02:25:07 PDT 2004
On Fri, 2004-09-24 at 02:53, Cliff wrote:
> Hi Vern/Christian,
> Ya,It's Ok to modify the script as what you said.I see that this is the result from "scope" used in ftp.bro.
> However,I don't understand that Why to import the concept of "scope" and "module" such as "module FTP" in ftp.bro and "module HTTP" in http.bro? What advantages has it?
It's just to have a concept of namespaces -- in a large policy
configuration there's a good chance that symbol names (for variables,
functions etc) would collide. The module and export statements allow you
to control how much pollution you cause in other modules. Also it's much
nicer if you don't have to think all the time about whether a symbol
name might already exist in another module.
Cheers,
Christian.
--
________________________________________________________________________
http://www.cl.cam.ac.uk/~cpk25
http://www.whoop.org
More information about the Bro
mailing list