[Bro-Dev] [Bro-Commits] [git/bro] master: Updates for SSH scripts. (9c2273b)

Seth Hall seth at icir.org
Thu Aug 11 08:39:28 PDT 2011


On Aug 11, 2011, at 11:22 AM, Gregor Maier wrote:

>> +##! Requires that :bro:id:`use_conn_size_analyzer` is set to T!  The heuristic
>> +##! is not attempted if the connection size analyzer isn't enabled.
> 
> I looks like the code doesn't check yet, whether use_conn_size_analyzer is indeed on (or better, it should probably check
> c$resp?$num_ip_bytes, since num_ip_bytes is optional.


It actually does that check further down in the file when the ssh_watcher event is initially scheduled. :)

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/




More information about the bro-dev mailing list