[Bro] Filename in bro script

anthony kasza anthony.kasza at gmail.com
Tue Feb 11 20:06:45 PST 2014


Submitted here <https://bro-tracker.atlassian.net/browse/BIT-1131>. Is
this the preferred method for submitting feature requests instead of
posting to this list?

-AK

On Tue, Feb 11, 2014 at 4:32 PM, Robin Sommer <robin at icir.org> wrote:
> Yeah, that information is not currently available. Can you guys say a
> bit more about the use case(s) here?
>
> I'm asking because we could either make it available directly (that
> should be pretty straight-forward) or cover it implicitly by exposing
> all command line parameters to script-land, along with some library
> functionality to parse them easily (which Seth is rooting for :-)
>
> In any case, please file a feature request ticket.
>
> Robin
>
> On Tue, Feb 11, 2014 at 15:12 -0800, anthony kasza wrote:
>
>> I've looked for this feature as well and have not been able to locate it.
>> It would be nice to have a @PKTSOURCE variable similar to the @FILENAME and
>> @DIR variables.
>> On Feb 11, 2014 10:19 AM, "Antonio Nappa" <antonio.nappa at imdea.org> wrote:
>>
>> > Hi guys,
>> >
>> > just a quick question, when I call bro with: bro myscript.bro -r file.pcap
>> > is there a way to have the file.pcap string passed as a variable or
>> > parameter inside the script?
>> >
>> >
>> > Thank you
>> >
>> >
>> > Antonio Nappa
>> >
>> > _______________________________________________
>> > Bro mailing list
>> > bro at bro-ids.org
>> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>> >
>
>> _______________________________________________
>> Bro mailing list
>> bro at bro-ids.org
>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
>
> --
> Robin Sommer * Phone +1 (510) 722-6541 *     robin at icir.org
> ICSI/LBNL    * Fax   +1 (510) 666-2956 * www.icir.org/robin



More information about the Bro mailing list