[Zeek] [EXT]Re: Time value errors

Justin Azoff justin at corelight.com
Thu Dec 19 07:01:52 PST 2019


On Thu, Dec 19, 2019 at 8:21 AM Scot Harris <SHARRIS at hollywoodfl.org> wrote:

> Bigger issue possibly.  A lot of zero values
>
>
That's probably a smaller issue :-) it's logging unknown or unset values as
0, when it should maybe just be optional fields that are logged as unset
values.. unfortunately with timestamps 0 gets turned into 1969.. we can
probably fix that in zeek-cut to not format 0 as a timestamp though.

-- 
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191219/5bccab37/attachment.html 


More information about the Zeek mailing list