[Bro-Dev] Help creating new analyzer

Kristin Stephens ksteph at cs.berkeley.edu
Thu Apr 14 20:57:51 PDT 2011


Hi Everyone,

I'm create a new analyzer for Bro and am currently just trying to create a
skeleton that does nothing, but compiles. I'm currently stuck at a compile
error that I don't really know the meaning of "cannot handle incremental
input"

I basically copied another analyzer and stripped out everything but the
basics. The only reference I could find to incremental input on the wiki was
using flowunit versus datagram in the *-analyzer.pac file. But I am using
flowunit there.

Any help would be much appreciated,
Kristin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20110414/5d8addbf/attachment.html 


More information about the bro-dev mailing list