idaholab / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
https://idaholab.github.io/Malcolm/
Other
353 stars 58 forks source link

fix the way we do environment variables in local.zeek #413

Closed mmguero closed 7 months ago

mmguero commented 7 months ago

This is how local.zeek reads "boolean" environment variables.

This is dumb, because a blank/empty string is the only thing that means "false." If the user puts the string false, it ends up as true. At the very least we should do blank/empty is false and also the string false.