Skip to content

Adding &optional to zeek records question #135

@zrobinette12

Description

@zrobinette12

Hello, was there a specific reason to not use &optional on several of the ja4 zeek records such as here? https://github.com/FoxIO-LLC/ja4/blob/main/zeek/ja4t/main.zeek#L42.

When writing JSON logs, it ends up looking like this in the JSON message if there's no value for JA4T and others that may not get recorded for a specific connection. "ja4t": "".

When adding &optional, the key/value just doesn't get written out instead of it being there but empty.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or requestzeekZeek package

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions