[Bro-Dev] [JIRA] (BIT-274) Finding lines where redefs occurred

Jon Schipp (JIRA) jira at bro-tracker.atlassian.net
Wed Mar 30 08:30:01 PDT 2016


    [ https://bro-tracker.atlassian.net/browse/BIT-274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=25204#comment-25204 ] 

Jon Schipp commented on BIT-274:
--------------------------------

[~johanna], thanks I'll ask him.

> Finding lines where redefs occurred
> -----------------------------------
>
>                 Key: BIT-274
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-274
>             Project: Bro Issue Tracker
>          Issue Type: New Feature
>          Components: Bro
>    Affects Versions: 1.5.1
>            Reporter: Seth Hall
>            Assignee: Jon Schipp
>
> First, support would need added to Bro for finding all of the lines and scripts where redef's against a certain variable occurred.  I would also like to see this support added through broctl.
> Here's the scenario...
> {noformat}
> [BroControl] > find redef ignore_checksums
> /usr/local/bro/share/bro/bro.init:360 const ignore_checksums = F &redef;
> /usr/local/bro/share/bro/site/local.bro:133 redef ignore_checksums = T;
> {noformat}
> This is relating to a discussion I had about trouble people have with starting with Bro and the gotcha's encountered from enabling the cluster support.  There are so many redef's happening and potentially without the user realizing it.



--
This message was sent by Atlassian JIRA
(v7.2.0-OD-04-029#72002)


More information about the bro-dev mailing list