[Bro-Dev] [Bro-Commits] [git/bro] master: Updates for SSH scripts. (9c2273b)
Seth Hall
seth at icir.org
Thu Aug 11 08:39:28 PDT 2011
On Aug 11, 2011, at 11:22 AM, Gregor Maier wrote:
>> +##! Requires that :bro:id:`use_conn_size_analyzer` is set to T! The heuristic
>> +##! is not attempted if the connection size analyzer isn't enabled.
>
> I looks like the code doesn't check yet, whether use_conn_size_analyzer is indeed on (or better, it should probably check
> c$resp?$num_ip_bytes, since num_ip_bytes is optional.
It actually does that check further down in the file when the ssh_watcher event is initially scheduled. :)
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/
More information about the bro-dev
mailing list