[Bro-Dev] Hui Lin_Where is Binpac warning for Bro 2.0

Seth Hall seth at icir.org
Fri Dec 9 18:37:08 PST 2011


On Dec 9, 2011, at 8:15 PM, Hui Lin (Hugo) wrote:

> Anyway, the news is cruel to me and I have to put those checks into Bro script.

What sort of checks are they?  I wouldn't think you'd want to have too many &check conditions within your parser, but I don't know the protocols you're working on.

> Does binpac++ will do something like this?

I don't recall.  You'll have to wait for Robin to answer. :)

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/




More information about the bro-dev mailing list