[Bro-Dev] [JIRA] (BIT-1129) RADIUS Protocol Analyzer

[Robin Sommer (JIRA)]

    [ https://bro-tracker.atlassian.net/browse/BIT-1129?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15556#comment-15556 ] 

Robin Sommer commented on BIT-1129:
-----------------------------------

Nice!

Do you have a test trace?

Two questions for {{scripts/base/protocols/radius/main.bro}}:

- I'm not sure I understand the expiration logic: is the assumption that even after expire() has expired an entry, there'll be a further message coming in for that ID and then it will be logged? In other words, I would have expected expire() to log the entry itself. 

- the attribute list is a vector but no other elements than the first are used?

> RADIUS Protocol Analyzer
> ------------------------
>
>                 Key: BIT-1129
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1129
>             Project: Bro Issue Tracker
>          Issue Type: New Feature
>          Components: Bro
>    Affects Versions: git/master
>            Reporter: grigorescu
>
> topic/vladg/radius is ready to be merged. It's been running at CMU for a few months with no issues.



--
This message was sent by Atlassian JIRA
(v6.2-OD-09-036#6252)