[Bro-Dev] [JIRA] (BIT-1254) file analysis framework sometimes returns hashes despite missing packets

[Jimmy Jones (JIRA)]

Jimmy Jones created BIT-1254:
--------------------------------

             Summary: file analysis framework sometimes returns hashes despite missing packets
                 Key: BIT-1254
                 URL: https://bro-tracker.atlassian.net/browse/BIT-1254
             Project: Bro Issue Tracker
          Issue Type: Problem
          Components: Bro
    Affects Versions: 2.3, git/master
         Environment: CentOS 6
            Reporter: Jimmy Jones
         Attachments: sample-3streams-hole.pcap

Putting the attached sample (3 streams, each with missing packets) though the file analysis framework, in files.log I see hashes for one streams but not the other 2. Should I get any hashes if there are missing packets?

bro -r sample-3streams-hole.pcap frameworks/files/hash-all-files.bro



--
This message was sent by Atlassian JIRA
(v6.4-OD-05-008#64003)