[Bro] Timestamp conversion code

Terry Healy thealy at bnl.gov
Mon Dec 2 06:36:27 PST 2013


Hello- New here an tasked with injesting some Bro log files. All is fine
except for the timestamp. I have found that I can use bro-cut to see the
desired (or usable) format, but I can't use bro-cut in my work flow and
was unable to reverse engineer what it was doing.

I just need to get from the (proprietary?) timestamp format to something
standard like:

2013-12-02T09:30:34-0500

Thank.

Terry



More information about the Bro mailing list