# new bro "CURRENT" release - 0.8a57

**URL:** <https://community.zeek.org/t/new-bro-current-release-0-8a57/437>\
**Category:** Zeek\
**Created:** [December 9, 2003, 6:21pm UTC](https://community.zeek.org/t/new-bro-current-release-0-8a57/437 "2003-12-09T18:21:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vern](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/vern/32/630_2.png) [@Vern](https://community.zeek.org/u/Vern)\
**Post date:** [December 9, 2003, 6:21pm UTC](https://community.zeek.org/t/new-bro-current-release-0-8a57/437/1 "2003-12-09T18:21:12Z")

</div>

An updated "CURRENT" version of Bro is now available from the usual location:

&nbsp;&nbsp;ftp://ftp.ee.lbl.gov/bro-pub-0.8-current.tar.gz

I've appended the changes between it and the last "CURRENT" version (0.8a48).

&nbsp;&nbsp;&nbsp;&nbsp;Vern

---

<div class="post-metadata">

**Author:** ![Mark\_Dedlow](https://avatars.discourse-cdn.com/v4/letter/m/74df32/32.png) [@Mark\_Dedlow](https://community.zeek.org/u/Mark_Dedlow)\
**Post date:** [December 12, 2003, 6:03pm UTC](https://community.zeek.org/t/new-bro-current-release-0-8a57/437/2 "2003-12-12T18:03:15Z")

</div>

> - The format of Bro's connection summaries is changing. The new format  
> &nbsp;&nbsp;looks like
> 
> &nbsp;&nbsp;&nbsp;&nbsp;1069437569.904605 0.230644 1.2.3.4 5.6.7.8 http 59377 80 tcp 610 275 S3 L
> 
> &nbsp;&nbsp;That is, \<timestamp\>, \<duration\>, \<originator address\>, \<responder address\>,  
> &nbsp;&nbsp;\<service\>, \<originator port\>, \<responder port\>, \<originator bytes\>,  
> &nbsp;&nbsp;\<responder bytes\>, \<connection state\>, \<flags\>. (Robin Sommer)
> 
> &nbsp;&nbsp;The script variable traditional\_conn\_format=T specifies to use the old  
> &nbsp;&nbsp;format rather than this new one. This is \*currently\* the default, but  
> &nbsp;&nbsp;will change soon to default to F instead. If you have comments on this  
> &nbsp;&nbsp;new format, we'd like to hear them.

The changes notes above don't mention the \<addl\> field. Is that just  
an oversight in the notes, or is it being droppped from the red log?

Will \<service\> still contain port numbers? Or will "other-nnnnn" become  
simply "other"? (that would be my preference)

Although I don't know what the "neighbor net" U flag even means, I wonder  
if this is the time to drop that, as the BRO manual says the whole notion  
is historical.

Mark

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:36pm UTC](https://community.zeek.org/t/new-bro-current-release-0-8a57/437/3 "2022-05-06T15:36:53Z")

</div>

Closed on May 6, 2022, 3:36pm UTC