[Bro] Checking for null/undefined variables

Siwek, Jon jsiwek at illinois.edu
Tue Nov 18 07:51:12 PST 2014


> On Nov 18, 2014, at 9:38 AM, Aubrey Wells <awells at digiumcloud.com> wrote:
> 
> Is there a way to check for null/undefined variables that I'm just missing, or do I need to rethink they way I'm doing this entirely?

The “?$” operator can be used to check whether an optional field of a record actually has a value.  Example:

http://try.bro.org/#/trybro/saved/96c4ba9d-3d49-4372-a01b-aa31157e46e1

- Jon




More information about the Bro mailing list