[Zeek] Creating a module and accessing an event in another script

Justin Azoff justin at corelight.com
Fri Jun 7 06:00:26 PDT 2019


On Fri, Jun 7, 2019 at 4:29 AM Merril Mathew <merril.mathew at baby2body.com>
wrote:

> Hi Justin,
>
> You are a life saver. :) That did the trick.
>

awesome :-)


> I also have one more question. I been searching online to understand how a
> function can return a user defined record and have not come across one
> yet.
>
> function set_session(c:  connection, var: string):  record
> {
> local info: SSH::Info;
> return info;
> }
> This doesn’t work. Am I on the right path here?
>

Close..

function set_session(c:  connection, var: string): SSH::Info

should work.


-- 
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190607/232b0b52/attachment.html 


More information about the Zeek mailing list