[Bro] BinPAC analyzer name

Johanna Amann johanna at icir.org
Mon Nov 28 15:05:55 PST 2016

By don't work - do you mean that it doesn't compile? Or does it not get
any traffic? Or does it not raise events?


On Mon, Nov 07, 2016 at 11:56:01PM +0100, Dane Wullen wrote:
> Hi there,
> I wrote a new analyzer with BinPAC for a protocol named 'AMS'.
> Somehow when I create the analyzer via the binpac python script and name 
> the analyzer 'AMS' or 'ams', the analyzer won't work. When I name it 
> 'TEST' or 'test', it works fine (same protocol specification, C++ Code, 
> etc.)
> Is there a name convention for new analyzer? Or does anyone know, why 
> BinPAC/Bro won't accept the name 'ams'?
> Thank you!
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

More information about the Bro mailing list