[Bro-Dev] [JIRA] (BIT-1104) Add tracking for MSIE 11

Robin Sommer (JIRA) jira at bro-tracker.atlassian.net
Mon Dec 9 15:47:52 PST 2013


     [ https://bro-tracker.atlassian.net/browse/BIT-1104?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robin Sommer updated BIT-1104:
------------------------------

    Resolution: Merged  (was: Fixed)
        Status: Closed  (was: Merge Request)

> Add tracking for MSIE 11
> ------------------------
>
>                 Key: BIT-1104
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1104
>             Project: Bro Issue Tracker
>          Issue Type: Patch
>          Components: Bro
>    Affects Versions: 2.1
>         Environment: Ubuntu
>            Reporter: Michael Stone
>            Assignee: Seth Hall
>              Labels: analyzer
>
> MSIE 11.0 currently shows up as <unknown browser>.  It looks like MS might have changed it's user agent string and doesn't include "MSIE".  I added the following to /usr/local/bro/share/bro/base/frameworks/software/main.bro
> just below the "MSIE" block and above the "Safari" block.
> else if ( /Trident\/7.0/ in uparsed_version ) 
>    {
>    if ( /rv:11\.0/ in unparsed_version ) {
>        software_name = "MSIE";
>        v = [$major=11,$minor=0];
>       }
>    }
> Disclaimer: I'm fairly new to working with Bro so this might not be the best way, but it seems to be working for me.
> Thanks!



--
This message was sent by Atlassian JIRA
(v6.2-OD-03#6206)


More information about the bro-dev mailing list