[Bro] SMB Event Prototype Issue

McMahon, Kevin J kmcmahon at mitre.org
Fri Feb 28 10:54:29 PST 2014

How broken is it?  I'm willing to start fixing it -- if it's a reasonably good starting point.

While I'm reasonably new to Bro, I have made quite a few mods to my FTP and HTTP scripts for local customization as well as a few minor mods in the analyzers for the same reasons (one of which is a bug that I've been negligent in supplying back to the community -- but I'm working on it).


-----Original Message-----
From: Seth Hall [mailto:seth at icir.org] 
Sent: Friday, February 28, 2014 12:21 PM
To: McMahon, Kevin J
Cc: 'Pearson, David'; bro at bro.org
Subject: Re: [Bro] SMB Event Prototype Issue

On Feb 28, 2014, at 10:41 AM, "McMahon, Kevin J" <kmcmahon at mitre.org> wrote:

> I've been interested in utilizing the SMB analyzer on Bro as well.  Where did you find Seth's github data on SMB?
> And, are you interested in collaborating on the porting of the SMB scripts?=

Unfortunately that branch is extremely broken.  


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list