[Bro-Dev] [JIRA] (BIT-274) Finding lines where redefs occurred

Jon Schipp (JIRA) jira at bro-tracker.atlassian.net
Mon Apr 11 09:24:01 PDT 2016

    [ https://bro-tracker.atlassian.net/browse/BIT-274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=25702#comment-25702 ] 

Jon Schipp commented on BIT-274:

[~seth] Is this something that's still applicable?

> Finding lines where redefs occurred
> -----------------------------------
>                 Key: BIT-274
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-274
>             Project: Bro Issue Tracker
>          Issue Type: New Feature
>          Components: Bro
>    Affects Versions: 1.5.1
>            Reporter: Seth Hall
>            Assignee: Jon Schipp
> First, support would need added to Bro for finding all of the lines and scripts where redef's against a certain variable occurred.  I would also like to see this support added through broctl.
> Here's the scenario...
> {noformat}
> [BroControl] > find redef ignore_checksums
> /usr/local/bro/share/bro/bro.init:360 const ignore_checksums = F &redef;
> /usr/local/bro/share/bro/site/local.bro:133 redef ignore_checksums = T;
> {noformat}
> This is relating to a discussion I had about trouble people have with starting with Bro and the gotcha's encountered from enabling the cluster support.  There are so many redef's happening and potentially without the user realizing it.

This message was sent by Atlassian JIRA

More information about the bro-dev mailing list