mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00

* origin/topic/jsiwek/log-escaping: Add missing ascii writer options to log header. Escape the ASCII log's set separator (addresses #712) Rewrite ODesc character escaping functionality. (addresses #681) Closes #712.
12 lines
527 B
Text
12 lines
527 B
Text
#separator \x7c\x7c
|
|
#set_separator||\x2c
|
|
#empty_field||\x2d
|
|
#unset_field||\x2d
|
|
#path||ssh
|
|
#fields||t||id.orig_h||id.orig_p||id.resp_h||id.resp_p||status||country
|
|
#types||time||addr||port||addr||port||string||string
|
|
1323275761.036351||1.2.3.4||1234||2.3.4.5||80||success||unknown
|
|
1323275761.036351||1.2.3.4||1234||2.3.4.5||80||failure||US
|
|
1323275761.036351||1.2.3.4||1234||2.3.4.5||80||fa\x7c\x7cure||UK
|
|
1323275761.036351||1.2.3.4||1234||2.3.4.5||80||su\x7c\x7cess||BR
|
|
1323275761.036351||1.2.3.4||1234||2.3.4.5||80||failure||MX
|