[Bro] Bro errors on opensuse 10.1 i586

[Jaya Dhanesh]

Hi

Iam using 0.9a11

Dhanesh.

-----Original Message-----
From: Jean-Philippe Luiggi [mailto:jp.luiggi at free.fr]
Sent: Thursday, November 30, 2006 19:45
To: Jaya Dhanesh
Cc: bro at ICSI.Berkeley.EDU
Subject: Re: [Bro] Bro errors on opensuse 10.1 i586


Hello Jaya,

I'm not familiar with opensuse but the first question coming to my mind is
about the Bro's version you use.

Best regards.

On Thu, Nov 30, 2006 at 03:12:21PM +0530, Jaya Dhanesh wrote:
>
> Hi,
>
> Bro compiles fine, installs fine, but this is what I get while trying to
> run it on opensuse 10.1 i585:
>
> /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 34:
> run-time error: error compiling pattern /(((((((((((((((((((((^?.*(etc.*
> \/.*(passwd|shadow|netconfig)))|(^?.*(IFS[ \t]*=)))|(^?.*(nph-test-cgi
> \?)))|(^?.*((%0a|\.\.)\/(bin|etc|usr|tmp))))|(^?.*(\/Admin_files\/order
> \.log)))|(^?.*(\/carbo\.dll)))|(^?.*(\/cgi-bin\/(phf|php\.cgi|
> test-cgi))))|(^?.*(\/cgi-dos\/args\.bat)))|(^?.*(\/cgi-win\/uploader
> \.exe)))|(^?.*(\/search97\.vts)))|(^?.*(tk
> \.tgz)))|(^?.*(ownz)))|(^?.*(viewtopic\.php.*%.*\(.*\()))|(^?.*(sshd
> \.(tar|
>
tgz).*)))|(^?.*([aA][dD][oO][rR][eE][bB][sS][dD].*)))|(^?.*([tT][aA][gG][gG]
>
[eE][dD].*)))|(^?.*(shv4\.(tar|tgz).*)))|(^?.*(lrk\.(tar|tgz).*)))|(^?.*(lyc
>
eum\.(tar|tgz).*)))|(^?.*(maxty\.(tar|tgz).*)))|(^?.*(rootII\.(tar|tgz).*)))
> |(^?.*(invader\.(tar|tgz).*))/
> /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 42:
> run-time error: error compiling pattern /((^?.*(.*\/c\
> +dir))|(^?.*(.*cool.dll.*)))|(^?.*(.*Admin.dll.*Admin.dll.*))/
> /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 48:
> run-time error: error compiling pattern /^?.*(\/cgi-bin\/(phf|php\.cgi|
> test-cgi))/
> /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 50:
> run-time error: error compiling pattern /^?.*(wwwroot|WWWROOT)/
> /home/vish/work/net/bro/bro-soap/policy/http-reply.bro, line 110:
> run-time error: error compiling pattern /^?.*(^ )/
> /home/vish/work/net/bro/bro-soap/policy/hot-ids.bro, line 15: run-time
> error: error compiling pattern /^?.*((y[o0]u)(r|ar[e3])([o0]wn.*))/
>
> Is there any problem with BRO regular expressions? How can I fix it?
>
> Thanks,
> Dhanesh
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro