[Bro] Plugin regex issue
liburdi.joshua at gmail.com
Sat Dec 5 07:59:42 PST 2015
Well, later turned out to come a lot sooner than I thought. I tested it with my second analyzer plugin and all is well. Thanks again!
> On Dec 5, 2015, at 10:52 AM, Josh Liburdi <liburdi.joshua at gmail.com> wrote:
> Thanks Robin, it looks like it fixed the issue I was having with this analyzer. I have another analyzer that primarily uses regex for the protocol parsing, so I’ll try that later and verify it works as well.
> Will the fix you pushed to git be available in the Bro 2.5 release, or will it be packaged and available sooner than that?
>> On Dec 4, 2015, at 8:51 PM, Robin Sommer <robin at icir.org> wrote:
>> On Tue, Dec 01, 2015 at 15:38 -0500, Josh Liburdi wrote:
>>> In the record above, when used as a plugin, the magic_cookie is
>>> skipped. When compiled, it works as expected.
>> Turns out it's a problem with the order in which the BinPAC system is
>> initialized. I just pushed a fix for Bro to git, that seems to solve
>> it. Give it a try.
>> Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin
More information about the Bro