> To be honest I'm not even sure if the behavior > is defined right now, i.e. if the later value will overwrite the first one.
I don't think it's defined. Looking at the code, the later one will indeed overwrite the first one. > Do you want to error out when two &defaults are found or overwrite the > first with the second one? My thinking is that listing them together should be an error. I don't see why it would be legitimate for this to occur, and it seems like a mistake that could be made if there's a lengthy list of attributes. Vern _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev