[Bro] How to convert name field in smb_files.log to "readable" string?

Seth Hall seth at corelight.com
Fri Dec 1 07:00:26 PST 2017



On 30 Nov 2017, at 13:47, Azoff, Justin S wrote:

> Does the json log writer make this simpler for users?  I think bro 
> writes out valid json for this,
> so any json parser should give you proper UTF-8 strings.

It writes out valid JSON but strings aren't handled as well as they 
could.  It's why I was saying that non-ascii bytes are escaped according 
to the json spec, but that has other problems.

   .Seth

--
Seth Hall * Corelight, Inc * www.corelight.com


More information about the Bro mailing list