Input framework: table name truncated at underscore --------------------------------------------------- Key: BIT-1294 URL: https://bro-tracker.atlassian.net/browse/BIT-1294 Project: Bro Issue Tracker Issue Type: Problem Components: Bro Affects Versions: git/master Reporter: Wouter Clarie Assignee: Jon Siwek Fix For: 2.4 When loading a table in the input framework, e.g.: Input::add_table([ $source="/tmp/sdb_servers", $name="sdb_servers", $idx=sdb_servers_idx, $val=sdb_servers_val, $destination=sdb_servers, $mode=Input::REREAD ]); And later on reporting when the input has been fully read: event Input::end_of_data(name: string, source: string) { Reporter::info(fmt("Input stream name %s source %s ready", name, source)); } This is what ends up in the reporter log: 0.000000 Reporter::INFO Input stream name sdb source /tmp/sdb_servers ready <script location redacted>, line 101 So it is truncating the input stream name before the underscore.