[Bro] field value missing error
Azoff, Justin S
jazoff at illinois.edu
Fri May 13 13:18:42 PDT 2016
> On May 13, 2016, at 4:01 PM, ps sunu <pssunu6 at gmail.com> wrote:
>
>
> event KRB::log_krb (rec: KRB::Info)
> {
>
> host_name_user1[rec$id$orig_h] = rec$client;
> }
>
>
> This is my sample code, while running this i am getting below error
> virtual-machine:~/Newlogs$ sudo bro -C contrained-delegation/Krb-contrained-delegation.cap Musers.bro
> orig
> 1139998844.531337 expression error in ./Musers.bro, line 51: field value missing [Musers::rec$client]
>
> that error line no 51 is marked as red ,any problem in this code ?
>
client is an optional field, you need to wrap that statement with a
if(rec?$client) { }
--
- Justin Azoff
More information about the Bro
mailing list