Robin Sommer de9f03b0bf New script misc/dump-events.bro, along with core support, that dumps events Bro is raising ... in an easily readable form. This is for debugging purposes, obviously. Example, including only SMTP events: > bro -r smtp.trace misc/dump-events.bro DumpEvents::include=/smtp/ [...] 1254722768.219663 smtp_reply [0] c: connection = [id=[orig_h=10.10.1.4, orig_p=1470/tcp, resp_h=74.53.140.153, [...] [1] is_orig: bool = F [2] code: count = 220 [3] cmd: string = > [4] msg: string = xc90.websitewelcome.com ESMTP Exim 4.69 #1 Mon, 05 Oct 2009 01:05:54 -0500 [5] cont_resp: bool = T 1254722768.219663 smtp_reply [0] c: connection = [id=[orig_h=10.10.1.4, orig_p=1470/tcp, resp_h=74.53.140.153, [...] [1] is_orig: bool = F [2] code: count = 220 [3] cmd: string = > [4] msg: string = We do not authorize the use of this system to transport unsolicited, [5] cont_resp: bool = T [...]		2013-11-22 14:20:00 -08:00
..
frameworks	Change MHR notice sub message URL to a redef.	2013-11-05 17:10:19 -05:00
integration	Add more script package README files	2013-10-22 14:44:59 -05:00
misc	New script misc/dump-events.bro, along with core support, that dumps events Bro is raising	2013-11-22 14:20:00 -08:00
protocols	Fix resp_size in ssh.log, require a minimum resp_size for the heuristic. Some work on geodata, but still a WIP.	2013-11-05 11:34:32 -05:00
tuning	Add more script package README files	2013-10-23 16:36:14 -05:00