[Bro] Bro errors on opensuse 10.1 i586

Jean-Philippe Luiggi jp.luiggi at free.fr
Thu Nov 30 09:13:36 PST 2006


Hello Jaya,

I can't remenber a bug looking to this one but could you consider testing the
last release (1.2) ?

Just to check the fact the problem is still here or not ?

Best regards.

On Thu, Nov 30, 2006 at 09:52:22PM +0530, Jaya Dhanesh wrote:
> Hi
> 
> Iam using 0.9a11
> 
> Dhanesh.
> 
> -----Original Message-----
> From: Jean-Philippe Luiggi [mailto:jp.luiggi at free.fr]
> Sent: Thursday, November 30, 2006 19:45
> To: Jaya Dhanesh
> Cc: bro at ICSI.Berkeley.EDU
> Subject: Re: [Bro] Bro errors on opensuse 10.1 i586
> 
> 
> Hello Jaya,
> 
> I'm not familiar with opensuse but the first question coming to my mind is
> about the Bro's version you use.
> 
> Best regards.
> 
> On Thu, Nov 30, 2006 at 03:12:21PM +0530, Jaya Dhanesh wrote:
> >
> > Hi,
> >
> > Bro compiles fine, installs fine, but this is what I get while trying to
> > run it on opensuse 10.1 i585:
> >
> > /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 34:
> > run-time error: error compiling pattern /(((((((((((((((((((((^?.*(etc.*
> > \/.*(passwd|shadow|netconfig)))|(^?.*(IFS[ \t]*=)))|(^?.*(nph-test-cgi
> > \?)))|(^?.*((%0a|\.\.)\/(bin|etc|usr|tmp))))|(^?.*(\/Admin_files\/order
> > \.log)))|(^?.*(\/carbo\.dll)))|(^?.*(\/cgi-bin\/(phf|php\.cgi|
> > test-cgi))))|(^?.*(\/cgi-dos\/args\.bat)))|(^?.*(\/cgi-win\/uploader
> > \.exe)))|(^?.*(\/search97\.vts)))|(^?.*(tk
> > \.tgz)))|(^?.*(ownz)))|(^?.*(viewtopic\.php.*%.*\(.*\()))|(^?.*(sshd
> > \.(tar|
> >
> tgz).*)))|(^?.*([aA][dD][oO][rR][eE][bB][sS][dD].*)))|(^?.*([tT][aA][gG][gG]
> >
> [eE][dD].*)))|(^?.*(shv4\.(tar|tgz).*)))|(^?.*(lrk\.(tar|tgz).*)))|(^?.*(lyc
> >
> eum\.(tar|tgz).*)))|(^?.*(maxty\.(tar|tgz).*)))|(^?.*(rootII\.(tar|tgz).*)))
> > |(^?.*(invader\.(tar|tgz).*))/
> > /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 42:
> > run-time error: error compiling pattern /((^?.*(.*\/c\
> > +dir))|(^?.*(.*cool.dll.*)))|(^?.*(.*Admin.dll.*Admin.dll.*))/
> > /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 48:
> > run-time error: error compiling pattern /^?.*(\/cgi-bin\/(phf|php\.cgi|
> > test-cgi))/
> > /home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 50:
> > run-time error: error compiling pattern /^?.*(wwwroot|WWWROOT)/
> > /home/vish/work/net/bro/bro-soap/policy/http-reply.bro, line 110:
> > run-time error: error compiling pattern /^?.*(^ )/
> > /home/vish/work/net/bro/bro-soap/policy/hot-ids.bro, line 15: run-time
> > error: error compiling pattern /^?.*((y[o0]u)(r|ar[e3])([o0]wn.*))/
> >
> > Is there any problem with BRO regular expressions? How can I fix it?
> >
> > Thanks,
> > Dhanesh
> >
> > _______________________________________________
> > Bro mailing list
> > bro at bro-ids.org
> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> 



More information about the Bro mailing list