add TTL to conn.log

Zeek
1

Hi every one
I am trying to add TTL field to conn.log
but can not seem to get TTL

there is TTL in the base/event.bif I can not get it to work.

could anyone help me out

Thank you

2

I am trying to add TTL field to conn.log
but can not seem to get TTL

TTL is given per-packet, but the conn logs represent an entire connection. What are you looking to get?

there is TTL in the base/event.bif I can not get it to work.

I have no clue what you're talking about here.

  .Seth