[Bro-Dev] [JIRA] (BIT-180) field value missing in secondary filter

Seth Hall (JIRA) jira at bro-tracker.atlassian.net
Sun Feb 9 21:48:37 PST 2014


     [ https://bro-tracker.atlassian.net/browse/BIT-180?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Seth Hall updated BIT-180:
--------------------------

    Resolution: Invalid
        Status: Closed  (was: Open)

Wow!  Another secondary path ticket!

> field value missing in secondary filter
> ---------------------------------------
>
>                 Key: BIT-180
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-180
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>    Affects Versions: 1.5.2
>            Reporter: Robin Sommer
>
> This is with trunk as of r6926, with a plain ./configure. 
> bro \-r ~/data/traces/surfing all
> Unknown destination <no-destination-given>
> Unknown destination <no-destination-given>
> ((vlan) and ((not (port 25 or port 587)) and (not (port 80 or port 8000 or port 8080)))) and (((((((((((((((((((((((((((((((((((((((((((tcp port 514) or (udp)) or (tcp port 989)) or (tcp port 994)) or (tcp dst port 80 or tcp dst port 8080 or tcp dst port 8000)) or (port 110)) or (port 6667)) or (tcp port 113)) or (tcp)) or (tcp port 585)) or (tcp port 614)) or (tcp port 990)) or (port 2049)) or (tcp port 524)) or (port 445)) or (tcp port 992)) or (port ftp)) or (port telnet or tcp port 513)) or ((ip[6:2] & 0x3fff \!= 0) and tcp)) or (arp)) or (tcp[13] & 7 \!= 0)) or (port 135)) or (port 53)) or (udp port 137)) or (udp port 69)) or (udp port 2002 and src net 134.96)) or (icmp)) or (tcp port 443)) or (tcp port 563)) or (tcp port 995)) or (port finger)) or ((ip[6:2] & 0x3fff \!= 0) and udp)) or (port 6346 or port 8436)) or (tcp port smtp or tcp port 587)) or (tcp port 22)) or (port 6666)) or (port 111)) or (tcp port 22)) or (tcp port 993)) or (tcp)) or (tcp src port 80 or tcp src port 8080 or tcp src port 8000)) or (tcp port 636)) or (udp port 123))
> a_udp_event()
> 1144876537.668448 ../policy/secondary-filter.bro, line 15 (pkt$udp): internal error: field value missing



--
This message was sent by Atlassian JIRA
(v6.2-OD-09-036#6252)



More information about the bro-dev mailing list