[Bro-Dev] Hui Lin_Where is Binpac warning for Bro 2.0

Seth Hall seth at icir.org
Fri Dec 9 17:06:39 PST 2011


On Dec 9, 2011, at 5:40 PM, Hui Lin (Hugo) wrote:

> That is a  really bad news for me. Then I have to spend much much more time to rewrite &check condition into Bro's script which is sometimes hard to do.
> 
> Is there any future plan to activate &check statement again?

Are you sure that this was working previously?  I don't think that the &check attribute has ever actually been implemented in binpac (at least the functionality of the &check statement.

 .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/




More information about the bro-dev mailing list