[Bro] Conflicting errors when creating a table
dnthayer at illinois.edu
Fri Aug 7 12:39:50 PDT 2015
The error message "bad index type" means that a table's index type
cannot be a set.
To solve this problem, you will probably need to add a new column
to your input file. The new column will be the index to your table.
On 08/07/2015 01:01 PM, Earl Eiland wrote:
> I’m trying to read in a table where the key is a set. The
> Input::add_table operation seems fine with this, but the table
> declaration fails. The line “global whitelist: table[set[addr]] of
> Service_whitelist_data = table(); “ generates the error ”bad index type
> I can avoid this error by declaring “global whitelist: table[addr] of
> Service_whitelist_data = table(); “, but then receive the error “Input
> stream whitelist: Table type does not match index type. Need type
> 'table':set[addr], got 'addr':addr”.
> I’m assuming that my type declaration “table[set[addr]]” is incorrect,
> and that the error message is suggesting a solution. I’ve tried a
> number of type declaration variations: all have failed. I’ve also
> looked through the documentation and input framework examples, but came
> away empty handed. How do I satisfy the 'table':set[addr] requirement?
> Best Regards,
> Earl Eiland,
> Sr. Cyber Security Engineer,
> Emerging Technologies, root9B,
> San Antonio, Texas
More information about the Bro