[Bro] using lookup_hostname()
Robin Sommer
robin at icir.org
Wed Sep 19 10:26:43 PDT 2007
On Tue, Sep 18, 2007 at 22:54 -0700, Scott Campbell wrote:
> I am having issues implementing the new lookup_hostname() bif. The
> problem involves the necessity for a boolean test while getting the
> results from an addr_set.
I'm not sure I understand the question but I've been using this in
an older script:
when ( local h = lookup_addr(c$id$resp_h) )
{ ... }
Robin
--
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org
LBNL/ICSI * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro
mailing list