[Bro] Timestamp conversion code

Terry Healy thealy at bnl.gov
Mon Dec 2 07:17:42 PST 2013


Perfect Jim. Thanks very much for the quick help.

On 12/02/2013 10:03 AM, James Welcher wrote:
> Add cf to your command pipeline
> 
> http://www.bro.org/community/software.html
> 
> On Monday, December 2, 2013, Terry Healy wrote:
> 
>     Hello- New here an tasked with injesting some Bro log files. All is fine
>     except for the timestamp. I have found that I can use bro-cut to see the
>     desired (or usable) format, but I can't use bro-cut in my work flow and
>     was unable to reverse engineer what it was doing.
> 
>     I just need to get from the (proprietary?) timestamp format to something
>     standard like:
> 
>     2013-12-02T09:30:34-0500
> 
>     Thank.
> 
>     Terry
>     _______________________________________________
>     Bro mailing list
>     bro at bro-ids.org <javascript:;>
>     http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> 
> 
> 
> -- 
> James Welcher



More information about the Bro mailing list