[Bro] error declaring a record

[Earl Eiland]

I’m declaring a record, and bro is reporting a syntax error ‘at or near “type”’.

I’ve compared my code to functional scripts, and can find examples where variables are declared as type “addr”.  However, the code below does not work ☹.  I can replace the “addr” type with “string” and the declaration is accepted.

export
    {
    redef enum Log::ID += {LOG};
    }

type Service_observed_key: record
    {
    conversation:  addr;
    };

Please advise!

Earl Eiland,
Sr. Cyber Security Engineer,
Emerging Technologies, root9B,
San Antonio, Texas

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150804/172b53fe/attachment.html