Re: [Bro-Dev] $history extensions - zero windows, logarithmic counts

2018-06-18 Thread Vern Paxson
> My thought for this was simply if it mattered *where* in the state history > the trouble occurred. I agree that it could ... but I think for at least some situations where it does, for the logs to help in diagnosing them will require something well beyond indicator flags. It's interesting to co

Re: [Bro-Dev] DHCP event removal

2018-06-18 Thread Alan Commike
On Fri, Jun 15, 2018 at 11:38 PM Seth Hall wrote: > > Ugh, I didn't consider that. Bro has re-reached the point where > touching any number of things can set off an avalanche of problems like > this. > The other aspect of Bro changes is in the logging format. This comment isn't specifically tie

Re: [Bro-Dev] DHCP event removal

2018-06-18 Thread Seth Hall
Thanks Vlad! .Seth On 16 Jun 2018, at 9:07, Vlad Grigorescu wrote: > Yep, already working on it. :-) > > On Sat, Jun 16, 2018 at 6:26 AM, Seth Hall wrote: > >> >> On 15 Jun 2018, at 17:22, Azoff, Justin S wrote: >> >>> The fix is a little trickier, you can't handle both events because the >>> D