[Bro] using lookup_hostname()

Robin Sommer robin at icir.org
Wed Sep 19 10:26:43 PDT 2007


On Tue, Sep 18, 2007 at 22:54 -0700, Scott Campbell wrote:

> I am having issues implementing the new lookup_hostname() bif.  The
> problem involves the necessity for a boolean test while getting the
> results from an addr_set.

I'm not sure I understand the question but I've been using this in
an older script:

   when ( local h = lookup_addr(c$id$resp_h) )
        { ... }

Robin

-- 
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org 
LBNL/ICSI    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list