[Lognorm] type:char-to: issues (?)

[Champ Clark III [Softwink]]

	Argh.. Strike that.  It helps if the rule is properly formated: 

rule=: unexpected RCODE %failcode:word% resolving '%type:char-to:\x27%': %src-ip:ipv4%#%src-port:number%

backup src # cat input  | ./normalizer -r ./rule
[cee at 115 src-port="53" src-ip="192.197.212.68" type="161.41.46.64.in-addr.arpa/PTR/IN" failcode="(SERVFAIL)"]

-- 
        Champ Clark III | Softwink, Inc | 800-538-9357 x 101
                     http://www.softwink.com

GPG Key ID: 58A2A58F
Key fingerprint = 7734 2A1C 007D 581E BDF7  6AD5 0F1F 655F 58A2 A58F
If it wasn't for C, we'd be using BASI, PASAL and OBOL.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.adiscon.net/pipermail/lognorm/attachments/20110118/d07268e8/attachment.pgp>