null set question

Zeek
1

I can’t find any test to do null set evaluation, let alone null string evaluation. For null sets, I am doing

local set_count = |set|;
if (set_count == 0) …

Shouldn’t there be a proper is null way of doing this? I can’t find it in the bro scripting documentation.

2

The way that you found is the way to do it. So - just check if the length of the string/vector/set is null. You can also do that in a single line without using a separate variable.

Is there a specific reason why you want a different way of doing that?

Johanna