[Bro] Bro errors on opensuse 10.1 i586

[Jean-Philippe Luiggi]

Hello Jaya,

I'm not familiar with opensuse but the first question coming to my mind is
about the Bro's version you use.

Best regards.

On Thu, Nov 30, 2006 at 03:12:21PM +0530, Jaya Dhanesh wrote:
> 
> Hi,
> 
> Bro compiles fine, installs fine, but this is what I get while trying to
> run it on opensuse 10.1 i585:
> 
> /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 34:
> run-time error: error compiling pattern /(((((((((((((((((((((^?.*(etc.*
> \/.*(passwd|shadow|netconfig)))|(^?.*(IFS[ \t]*=)))|(^?.*(nph-test-cgi
> \?)))|(^?.*((%0a|\.\.)\/(bin|etc|usr|tmp))))|(^?.*(\/Admin_files\/order
> \.log)))|(^?.*(\/carbo\.dll)))|(^?.*(\/cgi-bin\/(phf|php\.cgi|
> test-cgi))))|(^?.*(\/cgi-dos\/args\.bat)))|(^?.*(\/cgi-win\/uploader
> \.exe)))|(^?.*(\/search97\.vts)))|(^?.*(tk
> \.tgz)))|(^?.*(ownz)))|(^?.*(viewtopic\.php.*%.*\(.*\()))|(^?.*(sshd
> \.(tar|
> tgz).*)))|(^?.*([aA][dD][oO][rR][eE][bB][sS][dD].*)))|(^?.*([tT][aA][gG][gG]
> [eE][dD].*)))|(^?.*(shv4\.(tar|tgz).*)))|(^?.*(lrk\.(tar|tgz).*)))|(^?.*(lyc
> eum\.(tar|tgz).*)))|(^?.*(maxty\.(tar|tgz).*)))|(^?.*(rootII\.(tar|tgz).*)))
> |(^?.*(invader\.(tar|tgz).*))/
> /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 42:
> run-time error: error compiling pattern /((^?.*(.*\/c\
> +dir))|(^?.*(.*cool.dll.*)))|(^?.*(.*Admin.dll.*Admin.dll.*))/
> /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 48:
> run-time error: error compiling pattern /^?.*(\/cgi-bin\/(phf|php\.cgi|
> test-cgi))/
> /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 50:
> run-time error: error compiling pattern /^?.*(wwwroot|WWWROOT)/
> /home/vish/work/net/bro/bro-soap/policy/http-reply.bro, line 110:
> run-time error: error compiling pattern /^?.*(^ )/
> /home/vish/work/net/bro/bro-soap/policy/hot-ids.bro, line 15: run-time
> error: error compiling pattern /^?.*((y[o0]u)(r|ar[e3])([o0]wn.*))/
> 
> Is there any problem with BRO regular expressions? How can I fix it?
> 
> Thanks,
> Dhanesh
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro