[Bro] Broken scan.bro script
Christoph Leuzinger
christoph.leuzinger at cs.uni-dortmund.de
Tue Oct 28 09:07:28 PDT 2008
Hi,
I'm running Bro 1.4-release and tried to use scan.bro as
BRO_START_POLICY. I get an error on startup, however:
chris at charon:~/sw/bro$ sudo ~/sw/bro/etc/bro.rc start
bro.rc: Starting /home/chris/sw/bro/bin/bro -W -i ne2 scan.bro
BROPATH: /home/chris/sw/bro/share/bro/site:/home/chris/sw/bro/share/bro:/home/chris/sw/bro/share/bro/sigs:/home/chris/sw/bro/share/bro/time-machine
/home/chris/sw/bro/share/bro/scan.bro, line 560: error: unknown identifier conn_state, at or near "conn_state"
Loading the conn.bro script in scan.bro helps (though I'm not sure if
this is the right thing to do). Bro is starting without complaining now
and port scans are being detected.
Cheers,
Christoph
-------------- next part --------------
A non-text attachment was scrubbed...
Name: scan_bro.patch
Type: text/x-diff
Size: 251 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20081028/c409d3c5/attachment.bin
More information about the Bro
mailing list