bro-cut

Development
1

I'm thinking bro-cut is something worth installing by default into
$prefix/bin/, even though it's living in bro-aux. Assuming you guys
agree, Jon, could you add the CMake magic for that? Thanks,

Robin

2

I'm thinking bro-cut is something worth installing by default into
$prefix/bin/, even though it's living in bro-aux. Assuming you guys
agree, Jon, could you add the CMake magic for that? Thanks,

Done.

3

I'm thinking bro-cut is something worth installing by default into
$prefix/bin/, even though it's living in bro-aux.

Yup, that tool is really handy and I am using it right away for the
workshop exercises. A few comments:

    - Neither -h nor --help seem to be a valid switch, although they
      "correctly" display the usage.

    - The usage currently ends with

        For time conversion, the def

      Something seems to miss.

    - Would you mind adding a way to specify an output separator (OFS in
      awk)? For example, when concatenating URLs from http.log, I would
      like to do something along the lines of:

        bro-cut -F '' host uri < http.log

      to get output in this form:

        mt1.google.com/vt/lyrs=m@162254822&hl=en&x=657&y=1581&z=12&s=
        mt0.google.com/vt/lyrs=m@162249697&hl=en&x=656&y=1581&z=12&s=Galil

    Matthias

4

    - Neither -h nor --help seem to be a valid switch, although they
      "correctly" display the usage.

    - The usage currently ends with

        For time conversion, the def

      Something seems to miss.

Thanks, I've fixed those. I also added a check that if no columns are
given, the help message gets printed as well (rather than printing
lots of empty lines).

    - Would you mind adding a way to specify an output separator (OFS in
      awk)?

I can see that, but that's something for later. Please file a ticket.

Robin

5

I can see that, but that's something for later. Please file a ticket.

Okay, done (#649).

    Matthias