[Bro] error declaring a record

Earl Eiland earl.eiland at root9b.com
Tue Aug 4 12:34:38 PDT 2015

I’m declaring a record, and bro is reporting a syntax error ‘at or near “type”’.

I’ve compared my code to functional scripts, and can find examples where variables are declared as type “addr”.  However, the code below does not work ☹.  I can replace the “addr” type with “string” and the declaration is accepted.

    redef enum Log::ID += {LOG};

type Service_observed_key: record
    conversation:  addr;

Please advise!

Earl Eiland,
Sr. Cyber Security Engineer,
Emerging Technologies, root9B,
San Antonio, Texas

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150804/172b53fe/attachment.html 

More information about the Bro mailing list