[Bro] using lookup_hostname()

Robin Sommer robin at icir.org
Wed Sep 19 11:27:55 PDT 2007


On Wed, Sep 19, 2007 at 10:26 -0700, I wrote:

>    when ( local h = lookup_addr(c$id$resp_h) )

Oops, copied the wrong snippet. I've also been using this:

      when ( local addresses = lookup_hostname(pu$host) )
           {
           for ( a in addresses )
               [...]
           }

Robin

-- 
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org 
LBNL/ICSI    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list