Re: printing stream columns

Henri Dubois-Ferriere <[email protected]> Fri, 1 Nov 2019 20:55:07 +0100
Newsgroups gmane.comp.security.detection.bro
Message-ID <CABcA1rs7yAbdhiZTjBaRk0yK__R6zqWGR-mfPvxFgebkt3WPdw@mail.gmail.com>
Ooh that looks great. Thanks!

On Fri, 1 Nov 2019 at 20:53, Jon Siwek <[email protected]> wrote:

> On Fri, Nov 1, 2019 at 4:11 AM Henri Dubois-Ferriere <[email protected]>
> wrote:
>
> > I'd like to be able to peek into nested records to get the inner fields
> that will show up in the logs. It doesn't seem like there's a way to do
> record introspection given a string representation of the record type name,
> but if I'd be delighted to be told I'm missing something.
>
> No, didn't look like there was a way to do that, but I've made a
> PR/patch that should make recursive introspection possible via
> something like `record_fields("conn_id")` for any arbitrary record
> type name:
>
> https://github.com/zeek/zeek/pull/675
>
> - Jon
>

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek