[Bro-Dev] binpac usage of &length = -1

Hui Lin (Hugo) hlin33 at illinois.edu
Sun Feb 10 13:48:41 PST 2013


On Fri, Feb 8, 2013 at 5:19 PM, Robin Sommer <robin at icir.org> wrote:

>
>
> On Fri, Feb 08, 2013 at 16:37 -0600, you wrote:
>
> > type req = record{
> >      header : uint8;
> >      data : bytestring &restofdata;
> > }
> > &length = -1 ;
>
> So one thing is that I'm not sure the &length attribute transfers over
> to the NewFrame() call, don't know the internals there. Second, the
> &restofdata should already tell BinPAC++ that you want all the
> remaining data; do you find that a &length is needed in addition? (As
> usual, I'm arguing from the perspective here how I believe that binpac
> *should* work; that doesn't always match what it actually
> does/requires ..).
>

Unfortunately, yes, you needed the &length field. Otherwise:

/home/****/bro/src/dnp3-protocol.pac:42: error : cannot handle incremental
input

Then the interesting question is when binpac can handle incremental input?


>
> Robin
>
> --
> Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
> ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org
>



-- 
Hui Lin
PhD Candidate, Research Assistant
Electrical and Computer Engineering Department
University of Illinois at Urbana-Champaign
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20130210/9e2257f5/attachment.html 


More information about the bro-dev mailing list