<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Wed, Jun 17, 2015 at 9:45 AM, James Swaro <span dir="ltr"><<a href="mailto:james.swaro@gmail.com" target="_blank">james.swaro@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr"><span class=""><div>> Just a guess, but it could be related to this: <a href="https://github.com/bro/bro/blob/master/CHANGES#L1578" target="_blank">https://github.com/bro/bro/blob/master/CHANGES#L1578</a><br></div></span>I'm looking, but nothing seems to pop out at me. <br><span class=""><br>> The other big change was moving to plugins, but if you're seeing it
added as a child analyzer, that doesn't sound like it'd be the issue.</span><div><div><div>It seems to be ok. Did data delivery change from DeliverPacket to something else? <br></div><div><span class=""><br>> Was this analyzer written in BinPAC, or in C++?<br></span>It was written in C++. </div></div></div></div></blockquote><div><br></div><div>Well, what I meant with that change was that the functions used for data delivery changed. Specifically:</div><div><br></div><div>Analyzer::{NextPacket, NextUndelivered, ForwardPacket, ForwardUndelivered, DeliverPacket, Undelivered} were modified to change the int seq parameter to a uint64. If your functions aren't updated, and are expecting a plain old int for the sequence number, I've seen the scenario you describe: the analyzer attaches, but doesn't function.</div><div><br></div><div> --Vlad</div><div><br></div></div></div></div>