On Tue, Jan 30, 2018 at 10:28 -0600, you wrote:
> Was there more benefit of using the predefined choice than saving the > overhead of calling out to script-land to do the context calculation? No, don't think so. It mainly came out of an analysis of existing scripts, and those 5-tuple based subsets were the main use case anways. Actually I'm not even sure anymore if there might have been a custom execute-my-own-function scope as well, I'll see if I can find the old code somewhere. Robin -- Robin Sommer * ICSI/LBNL * ro...@icir.org * www.icir.org/robin _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
