[Bro] Upgrade from 2.4 to 2.5

Mike Dopheide dopheide at gmail.com
Thu Apr 19 08:35:09 PDT 2018


I think it was just that you can have multiple files per connection so
'filename' became 'filenames'.

On Thu, Apr 19, 2018 at 10:26 AM, Patrick Kelley <
patrick.kelley at criticalpathsecurity.com> wrote:

> Jon, for my own edification, what was the driving motivation for removing
> the c$http$filename field?
>
> On Thu, Apr 19, 2018 at 11:09 AM, Jon Siwek <jsiwek at corelight.com> wrote:
>
>>
>>
>> On 4/19/18 12:06 AM, Jim Mellander wrote:
>> > I ran across this issue just the other day.  Evidently, ?$ no longer
>> > works in a ternary expression, which I presume is a bug, rather than a
>> > feature.
>>
>> This test case at least still works as expected in git/master:
>>
>> ```bro
>> type myrec: record { a: string &optional; };
>> local mr1 = myrec($a = "aaa");
>> local mr2 = myrec();
>> print mr1?$a ? "yes" : "no";
>> print mr2?$a ? "yes" : "no";
>> ```
>>
>> Can you give more details on exactly what you see or file a bug report
>> if you've found a situation where the ?$ or ternary expressions aren't
>> working?
>>
>> - Jon
>> _______________________________________________
>> Bro mailing list
>> bro at bro-ids.org
>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>>
>
>
>
> --
>
> *Patrick Kelley, CISSP, C|EH, ITIL*
> *CTO*
> patrick.kelley at criticalpathsecurity.com
> (o) 770-224-6482
>
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180419/a886757c/attachment-0001.html 


More information about the Bro mailing list