[Bro] log_file variable in ftp.bro

Christian Kreibich christian at whoop.org
Fri Sep 24 02:25:07 PDT 2004


On Fri, 2004-09-24 at 02:53, Cliff wrote:
> Hi Vern/Christian,
>     Ya,It's Ok to modify the script as what you said.I see that this is the result from "scope" used in ftp.bro.
>     However,I don't understand that  Why to import the concept of "scope" and "module" such as "module FTP" in ftp.bro and "module HTTP" in http.bro? What advantages has it?

It's just to have a concept of namespaces -- in a large policy
configuration there's a good chance that symbol names (for variables,
functions etc) would collide. The module and export statements allow you
to control how much pollution you cause in other modules. Also it's much
nicer if you don't have to think all the time about whether a symbol
name might already exist in another module.

Cheers,
Christian.
-- 
________________________________________________________________________
                                          http://www.cl.cam.ac.uk/~cpk25
                                                    http://www.whoop.org





More information about the Bro mailing list