[Bro] field value missing error

Azoff, Justin S jazoff at illinois.edu
Fri May 13 13:18:42 PDT 2016


> On May 13, 2016, at 4:01 PM, ps sunu <pssunu6 at gmail.com> wrote:
> 
> 
> event KRB::log_krb (rec: KRB::Info)
> {
> 
>   host_name_user1[rec$id$orig_h] = rec$client;
> }
> 
> 
>                This is my sample code, while running this i am getting below error 
> virtual-machine:~/Newlogs$ sudo bro -C contrained-delegation/Krb-contrained-delegation.cap  Musers.bro
> orig
> 1139998844.531337 expression error in ./Musers.bro, line 51: field value missing [Musers::rec$client] 
> 
>             that error line no 51 is marked as red ,any problem in this code ?
> 

client is an optional field, you need to wrap that statement with a

    if(rec?$client) { }

-- 
- Justin Azoff





More information about the Bro mailing list