input framework - reading data from files - set vs table data structure?

Zeek
1

Hey,

Is there a way to read data from a file into a “set” data structure (instead of “table”)?

I would like to read contents of the file that has list of domain names for example, one per line and store in a “set” data structure variable.

Thanks,

Konrad

2

Yep, you just setup a table with only an index like so:

https://github.com/zeek/zeek/blob/master/testing/btest/scripts/base/frameworks/input/set.zeek

3

Awesome, thank you very much!

Konrad