Re: [EXT]Re: Time value errors

--===============1084849913==
Content-Type: multipart/alternative; boundary="000000000000865248059a0fd97b"

--000000000000865248059a0fd97b
Content-Type: text/plain; charset="UTF-8"

On Thu, Dec 19, 2019 at 8:21 AM Scot Harris <[email protected]> wrote:

> Bigger issue possibly.  A lot of zero values
>
>
That's probably a smaller issue :-) it's logging unknown or unset values as
0, when it should maybe just be optional fields that are logged as unset
values.. unfortunately with timestamps 0 gets turned into 1969.. we can
probably fix that in zeek-cut to not format 0 as a timestamp though.

-- 
Justin

--000000000000865248059a0fd97b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Thu, Dec 19, 2019 at 8:21 AM Scot Harr=
is &lt;<a href=3D"mailto:[email protected]">[email protected]</=
a>&gt; wrote:<br></div><div class=3D"gmail_quote"><blockquote class=3D"gmai=
l_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,20=
4,204);padding-left:1ex">





<div lang=3D"EN-US">
<div class=3D"gmail-m_-5750782578760947443WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:Calibri,sa=
ns-serif;color:rgb(31,73,125)">Bigger issue possibly.=C2=A0 A lot of zero v=
alues<u></u><u></u></span></p>
<p class=3D"MsoNormal"></p></div></div></blockquote><div><br></div><div>Tha=
t&#39;s probably a smaller issue :-) it&#39;s logging unknown or unset valu=
es as 0, when it should maybe just be optional fields that are logged as un=
set values.. unfortunately with timestamps 0 gets turned into 1969.. we can=
 probably fix that in zeek-cut to not format 0 as a timestamp though.=C2=A0=
<br></div></div><div><br></div>-- <br><div dir=3D"ltr" class=3D"gmail_signa=
ture"><div dir=3D"ltr">Justin</div></div></div>

--000000000000865248059a0fd97b--

--===============1084849913==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
--===============1084849913==--