> how do I declare (3) so that I can avoid the "&default function type clash"
> error above.
I guess the function for initialization receives the index that should
be initialized. In this case the index consists of two values. I tried
the following and Bro did not complain:
global c_likely_scanner: table[addr,port] of opaque of cardinality
&default = function(a: addr, p: port): opaque of cardinality {
return hll_cardinality_init(0.1, 0.95); }
&read_expire=1 day;
Hope that works for you!
Regards,
Jan
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
