[Bro-Dev] [JIRA] (BIT-1256) file_state_remove event after bro_done

Jimmy Jones (JIRA) jira at bro-tracker.atlassian.net
Thu Sep 18 08:49:07 PDT 2014


Jimmy Jones created BIT-1256:
--------------------------------

             Summary: file_state_remove event after bro_done
                 Key: BIT-1256
                 URL: https://bro-tracker.atlassian.net/browse/BIT-1256
             Project: Bro Issue Tracker
          Issue Type: Problem
          Components: Bro
    Affects Versions: 2.3, git/master
         Environment: CentOS 6
            Reporter: Jimmy Jones
         Attachments: fa.bro, weird8.pcap

Using the attached bro script (just prints in bro_done and file_state_remove events) and capture, the bro_done event is fired before file_state_remove.



--
This message was sent by Atlassian JIRA
(v6.4-OD-05-008#64003)


More information about the bro-dev mailing list