[Bro] A way to check if record field is already set
Josh Liburdi
liburdi.joshua at gmail.com
Thu Jun 26 06:43:25 PDT 2014
"?$" will check if a value exists for any field. For your example, put $http?$host in the script before you try to process the host field.
-Josh
On Thu, Jun 26, 2014 at 09:34 AM, עומר עומר, wrote:
_______________________________________________
Bro mailing list
bro at bro-ids.org
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140626/24942a9a/attachment.html
More information about the Bro
mailing list