[Bro] report log for error message
Zhai, Jim (MGS)
Jim.Zhai at ontario.ca
Fri Aug 8 05:56:20 PDT 2014
From: Hosom, Stephen M [mailto:hosom at battelle.org]
Sent: August-08-14 8:55 AM
To: Zhai, Jim (MGS); bro at bro.org
Subject: RE: report log for error message
It's normally best to prevent these errors by checking to determine if the value exists before using it.
if ( c$smtp?$from )
## do stuff
Lots of errors within Bro scripts can cause some pretty interesting problems with your cluster.
From: bro-bounces at bro.org [mailto:bro-bounces at bro.org] On Behalf Of Zhai, Jim (MGS)
Sent: Friday, August 08, 2014 8:51 AM
To: bro at bro.org
Subject: [Bro] report log for error message
Got a lot of ERROR in report log for the smtp. "....Reporter::ERROR field value missing [SMTPurl::c$smtp$from] ....." Is that some way to ignore this record?
Bro mailing list
bro at bro-ids.org
More information about the Bro