error declaring a record

I’m declaring a record, and bro is reporting a syntax error ‘at or near “type”’.

I’ve compared my code to functional scripts, and can find examples where variables are declared as type “addr”. However, the code below does not work L. I can replace the “addr” type with “string” and the declaration is accepted.



redef enum Log::ID += {LOG};


type Service_observed_key: record


conversation: addr;


Please advise!

Earl Eiland,

Sr. Cyber Security Engineer,

Emerging Technologies, root9B,

San Antonio, Texas

For any others that may run into a similar situation, ‘conversation’ is a reserved word In bro. The problem disappeared when I renamed the variable.