[Bro] reference table in a table

Kellogg, Brian D (OLN) bkellogg at dresser-rand.com
Sun Dec 29 15:58:11 PST 2013


Found the answer here finally, thanks:  http://article.gmane.org/gmane.comp.security.detection.bro/1547/match=table+record

Thank you,
Brian
________________________________
From: bro-bounces at bro.org [bro-bounces at bro.org] on behalf of Kellogg, Brian D (OLN) [bkellogg at dresser-rand.com]
Sent: Sunday, December 29, 2013 4:20 PM
To: bro at bro.org
Subject: [Bro] reference table in a table

Sorry for another syntax question again, but how do I add table entries to and reference a table within a table.  Both tables are tables of record types.  I've tried the below:

Reference:
hosts[c$id$orig_h]$TxDests[c$id$resp_h]$num += 1;

Add entry:
hosts[c$id$orig_h] = [$TxDests[c$id$resp_h]=[$num=1], $state=F];


Thank you,
Brian

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131229/0e015ff2/attachment.html 


More information about the Bro mailing list