[Bro] A way to check if record field is already set

Josh Liburdi liburdi.joshua at gmail.com
Thu Jun 26 06:43:25 PDT 2014


"?$" will check if a value exists for any field. For your example, put $http?$host in the script before you try to process the host field.

-Josh

On Thu, Jun 26, 2014 at 09:34 AM, עומר עומר, wrote:

_______________________________________________
Bro mailing list
bro at bro-ids.org
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140626/24942a9a/attachment.html 


More information about the Bro mailing list