[Bro-Dev] Hui Lin_Binpac: handle incremental input for flowunit

[Seth Hall]

On Jul 22, 2011, at 12:28 AM, Hui Lin wrote:

> Here the &length is set by its attribute length and length is then decided according to different situation. so I think this might be working in my case? As I can similarly set length to different value according to the function code and then use this to set the &length. 

Yes, you should be able to do something similar to that.  I can't claim to have come up with that technique either.  Whoever wrote the previous binpac SSL analyzer did it, but we are currently having some trouble with that when DPD is enabled.  We're trying to get it fixed for the preview though.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/