[Bro] SMB Event Prototype Issue
McMahon, Kevin J
kmcmahon at mitre.org
Fri Feb 28 10:54:29 PST 2014
How broken is it? I'm willing to start fixing it -- if it's a reasonably good starting point.
While I'm reasonably new to Bro, I have made quite a few mods to my FTP and HTTP scripts for local customization as well as a few minor mods in the analyzers for the same reasons (one of which is a bug that I've been negligent in supplying back to the community -- but I'm working on it).
From: Seth Hall [mailto:seth at icir.org]
Sent: Friday, February 28, 2014 12:21 PM
To: McMahon, Kevin J
Cc: 'Pearson, David'; bro at bro.org
Subject: Re: [Bro] SMB Event Prototype Issue
On Feb 28, 2014, at 10:41 AM, "McMahon, Kevin J" <kmcmahon at mitre.org> wrote:
> I've been interested in utilizing the SMB analyzer on Bro as well. Where did you find Seth's github data on SMB?
> And, are you interested in collaborating on the porting of the SMB scripts?=
Unfortunately that branch is extremely broken.
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro