[Bro] Hui Lin_NOTICE function redefinition error

Hui Lin (Hugo) hlin33 at illinois.edu
Fri Jan 13 21:17:51 PST 2012


Being stupid again.

It is again the version mix up of the policy files. Discussed this with
Robin before. I delete many old script and now it seems to be fine now.

Best,

Hui

On Fri, Jan 13, 2012 at 10:34 PM, Lin, Hui <hlin33 at illinois.edu> wrote:

>  Well this is what my codes look like. I just call NOTICE function within
> one of my event handler.
>
> @load notice
> @load /home/hugo/experiment/dnp3/policy/dnp3headers_sl.bro
>
> redef enum Notice += {
>        CriState,    # notice for my semantic signature matching; critical
> state
> };
>
> ......
>
> event dnp3_crob(c: connection, is_orig: bool, control_code: count, count8:
> count, on_time: count, off_time: count, status_code: count)
> {
>         .....
>         NOTICE([$note=CriState,
>                 $msg="Test CriState is recoreded",
>                 $conn=c]);
>         .....
> }
>
> On Fri, Jan 13, 2012 at 10:27 PM, Seth Hall <seth at icir.org> wrote:
>
>>
>> On Jan 13, 2012, at 11:18 PM, Hui Lin (Hugo) wrote:
>>
>> > When I load notice and use NOTICE function in my script, there is a
>> error message
>> >
>> > error in /usr/local/bro/share/bro/base/frameworks/notice/./main.bro,
>> line 569: already defined (NOTICE)
>>
>>  You're going to need to show a snippet of code that causes this error. :)
>>
>>  .Seth
>>
>> --
>> Seth Hall
>> International Computer Science Institute
>> (Bro) because everyone has a network
>> http://www.bro-ids.org/
>>
>>
>
>
> --
> Hui Lin
> Research Assistant
> DEPEND Research Group, ECE Department
> University of Illinois at Urbana-Champaign
> hlin33 at illinois.edu
>



-- 
Hui Lin
Research Assistant
DEPEND Research Group, ECE Department
University of Illinois at Urbana-Champaign
hlin33 at illinois.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120113/c47d06bf/attachment-0001.html 


More information about the Bro mailing list