[Bro-Dev] Hui Lin_Where is Binpac warning for Bro 2.0

Hui Lin (Hugo) hlin33 at illinois.edu
Fri Dec 9 12:02:02 PST 2011


I could not see binpac warning in Bro 2.0.

I used to see the binpac warning generated by &check statement, showing in
the stdout. But now, I could not see any thing and could not find any thing
in the log.

Here is how I test it. In the "default" branch of "case" statement, I write

default -> unknown: Debug_Byte *&check(0)*;

My purpose is that if the network packet is not correct, then it come to
the default case, then I hope that binpac can directly give me some warning
instead of writing bro script to detect it.

However, I did not see any warning in Bro 2.0 when this branch is entered.



Hui Lin
Research Assistant
DEPEND Research Group, ECE Department
University of Illinois at Urbana-Champaign
hlin33 at illinois.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20111209/23e8b513/attachment.html 

More information about the bro-dev mailing list