[Bro] Log Source

[Matt Clemons]

Is there a way to add Worker source to all bro logs?

I was able to do this with the conn.log, but if i try others, bad things
happen.  Can someone help?


redef record Conn::Info += {

        peer_descr: string &default="unknown" &log;

};



event connection_state_remove(c: connection){

        c$conn$peer_descr = peer_description;
}

-- 
Regards,

Matt Clemons
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150223/18ed158c/attachment.html