Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-08 17:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
860 commits 387 branches 195 tags 264 MiB
Commit graph

3 commits

Author SHA1 Message Date
Jon Siwek
4f15628146 Fix logging.ascii-empty & logging.ascii-options test failures. 
Logging to stdout for use in a baseline doesn't work well when
there may be scripts that get loaded by default (in this case,
packet-filter) and also do logging.  Instead just baseline against
the logs generated by the test in question.
 2011-06-16 15:23:47 -05:00
Robin Sommer
38a1aa5a34 &log keyword, and vector logging. 
The &log keyword now operates as discussed:

    - When associated with individual record fields, it defines them
      as being logged.

    - When associated with a complete record type, it defines all fields
      to be logged.

    - When associated with a record extension, it defines all added
      fields to be logged.

    Note that for nested record types, the inner fields must likewise
    be declared with &log. Consequently, conn_id is now declared with
    &log in bro.init.

Vectors are now allowed to be logged and will be recorded as an
ordered set of items.
 2011-03-28 18:14:05 -07:00
Robin Sommer
c6d20dbfdf Adding a few options to the ASCII writer. 
module LogAscii;

export {
	# Output everything to stdout rather than into files. This is primarily
	# for testing purposes.
	const output_to_stdout = F &redef;

	# The separator between fields.
	const separator = "\t" &redef;

	# True to include a header line with column names.
	const include_header = T &redef;
}
 2011-03-08 21:44:46 -08:00