[Bro] a odd problem

Cliff zhangwei at comexgenesys.com
Fri Sep 17 01:31:29 PDT 2004


Hi all,
    I encounter a odd problem when i run *bro* today.

    # ./bro my -w /home/zw/bro09171617.dump
    input in flex scanner failed

    my.bro as following:

    #my.bro  09/06/2004 by Cliff

@load mt
@load worm
@load snort

#redef suppress_scan_checks=T;
redef root_servers={192.168.10.2};
redef interfaces="eth0";

#redef bro_log_file=open_log_file("comex");
redef weird_file=open_log_file("./log/comex");


#capture_filters and restrict_filters
#redef capture_filters+={["ftp"]="port ftp",["telnet"]="port telnet",
#                       ["ssh"]="port ssh",
#                     };
#redef restrict_filters={["net"]="net 192.168.10"};


#signature_files
redef signature_files+="snort-default.sig";
redef signature_files+="worm.sig";

It work well before.However,it doesn't work today?
Who can give me some hints?


Thanks,
Cliff




More information about the Bro mailing list