[Bro] question about printing timestamps

Seth Hall seth at icir.org
Wed Mar 16 10:57:58 PDT 2011


I received a question privately about formatting timestamps in a human readable manner the other day and I thought I'd answer the question a bit more publicly.

To format "time" values as human readable, you can use either %D or %T in calls to fmt().  Like this:
	fmt("%D", network_time());

Hopefully this helps someone.  We'll try to make sure that things like this will be documented for the next release.

  .Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/





More information about the Bro mailing list