On Fri, Jun 15, 2018 at 11:38 PM Seth Hall <s...@corelight.com> wrote:

>
> Ugh, I didn't consider that.  Bro has re-reached the point where
> touching any number of things can set off an avalanche of problems like
> this.
>

The other aspect of Bro changes is in the logging format. This comment
isn't specifically tied the DHCP change, but since we're talking about
breaking things....

With the default TSV, any change can break export into the various back-end
log stores and SIEMs. When adding new fields, it would be nice to see them
added to the end of the Info structure.

   ...alan
_______________________________________________
bro-dev mailing list
bro-dev@bro.org
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

Reply via email to