[Bro] question about printing timestamps
Seth Hall
seth at icir.org
Wed Mar 16 10:57:58 PDT 2011
I received a question privately about formatting timestamps in a human readable manner the other day and I thought I'd answer the question a bit more publicly.
To format "time" values as human readable, you can use either %D or %T in calls to fmt(). Like this:
fmt("%D", network_time());
Hopefully this helps someone. We'll try to make sure that things like this will be documented for the next release.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/
More information about the Bro
mailing list