[Bro] many error with bro policy
Paolo Tironi
paolo.tironi85 at gmail.com
Wed Jul 16 07:50:50 PDT 2008
Hi, I've some problems using bro (offline). When I set a policy on bro to
scan a dump file it happens I have this warnings:
/usr/local/bro/policy//scan.bro, line 92: warning: no such host:
j5004.inktomisearch.com
/usr/local/bro/policy//scan.bro, line 92: warning: no such host:
j5005.inktomisearch.com
/usr/local/bro/policy//scan.bro, line 93: warning: no such host:
j5006.inktomisearch.com
/usr/local/bro/policy//scan.bro, line 93: warning: no such host:
j100.inktomi.com
/usr/local/bro/policy//scan.bro, line 93: warning: no such host:
j101.inktomi.com
/usr/local/bro/policy//scan.bro, line 94: warning: no such host:
j3002.inktomi.com
/usr/local/bro/policy//scan.bro, line 94: warning: no such host:
si3000.inktomi.com
/usr/local/bro/policy//scan.bro, line 94: warning: no such host:
si3001.inktomi.com
/usr/local/bro/policy//scan.bro, line 95: warning: no such host:
si3002.inktomi.com
/usr/local/bro/policy//scan.bro, line 95: warning: no such host:
si3003.inktomi.com
/usr/local/bro/policy//scan.bro, line 95: warning: no such host:
si4000.inktomi.com
/usr/local/bro/policy//scan.bro, line 96: warning: no such host:
si4001.inktomi.com
/usr/local/bro/policy//scan.bro, line 96: warning: no such host:
si4002.inktomi.com
/usr/local/bro/policy//scan.bro, line 96: warning: no such host:
wm3018.inktomi.com
Everytime I have this warnings I have also some errors like:
/usr/local/bro/policy//ftp.bro, line 48: run-time error: error compiling
pattern /(^?.*(.*\.rhosts))|(^?.*(.*\.forward))/
and bro don't create any log or alarm.
I don't understand this error. Can you help me?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20080716/96d55fc5/attachment.html
More information about the Bro
mailing list