[Bro-Dev] [JIRA] (BIT-1407) -f silently fails if base/frameworks/packet-filter isn't loaded

Vern Paxson (JIRA) jira at bro-tracker.atlassian.net
Mon Jun 1 11:36:00 PDT 2015


    [ https://bro-tracker.atlassian.net/browse/BIT-1407?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20904#comment-20904 ] 

Vern Paxson commented on BIT-1407:
----------------------------------

Also, regarding the policy script adding the -f flag: how would the user discover that that's what they need to do (have the policy script loaded) to get the flag?  I can see quite a bit of perplexment if Bro just tells the user that the flag doesn't exist without explaining why, if they don't have the script loaded.

> -f silently fails if base/frameworks/packet-filter isn't loaded
> ---------------------------------------------------------------
>
>                 Key: BIT-1407
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1407
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>            Reporter: Vern Paxson
>         Attachments: signature.asc
>
>
> I know we've been through this before (though searching the tickets in Jira, I couldn't find the thread).  But to revisit: the "-f filter" option silently does nothing if base/frameworks/packet-filter isn't loaded (so the scenario here is using -b to suppress its automatic loading).  This can lead to seriously confusing behavior.  It would be preferable if there's either an error message indicating that the option won't be supported, or if it forced loading of packet-filter.



--
This message was sent by Atlassian JIRA
(v6.5-OD-05-041#65001)


More information about the bro-dev mailing list