/ 
Bro-Log-Parse-0.05
River stage zero No dependents

Changes for version 0.05

  • Change: 91182c1112c183c8b9e0dc4b52f4fbb5a8bf8403 Author: Johanna Amann <johanna@icir.org> Date : 2015-07-15 11:47:31 +0000
    • a few more accessors, fix documentation, more tests.
  • Change: e9302271dc1f3754d8620d4ae25346012949deb3 Author: Johanna Amann <johanna@icir.org> Date : 2015-07-15 11:25:22 +0000
    • remove all the stuff that really should not be part of this package.
  • Change: 79d74bf42ea2beed6b415d9301f3a38668b3b5a8 Author: Johanna Amann <johanna@icir.org> Date : 2015-07-09 19:01:56 +0000
    • add executable allowing us to hash specified columns.
  • Change: 6786954bae1d0b69a8b1828e46153f9ce15b7f3f Author: Johanna Amann <johanna@icir.org> Date : 2015-04-27 11:56:48 +0000
    • also add -i command line option that just skips nonexisting lines. Furthermore, add -n that nulls nonexistant fields.
  • Change: e61beae40e49ebba50f6953e1d261957bc0a0073 Author: Johanna Amann <johanna@icir.org> Date : 2015-04-21 12:27:05 +0000
    • let app deal with nonexisting fields
  • Change: b4ca05e0ac4d1ea2f24797b8410d354be19eb444 Author: Johanna Amann <johanna@icir.org> Date : 2015-04-21 12:23:21 +0000
    • set not existing fields to undef, instead of just completely ignoring them.
    • That makes it possible to see that undefined fields were specified in the file later.
  • Change: 0b6294c6ab0dfb218b700e75042dde72c5eb356a Author: Johanna Amann <johanna@icir.org> Date : 2015-04-21 08:15:43 +0000
    • add the beginnings of a cli.
    • This is messy and undocumented for the moment, sorry.
    • Short overview: run bro-filter with arguments to get output
    • -p => select columns to print. Separated by p or define several -p switches -u => only print unique columns (uniqueness determined by selected output) -c => count unique columns (implies -c). -t => trunate selected columns to value. -t can be used several times.
    • Examples: $ bro-filter -p ts,uid logs/ssl.log 1394747126.855035 CXWv6p3arKYeMETxOg 1394747129.505622 CjhGID4nQcgTWjvg4c
    • $ bro-filter -cp ts logs/ssl.log 1394747126.855035 1 1394747129.505622 1
    • $ bro-filter -cp ts -t ts=3600 logs/ssl.log 1394744400 2

Documentation

Bro::Log::Parse

Modules

Bro::Log::Parse
Object-oriented Perl interface for parsing Bro log files

Other files