[Bro] many error with bro policy

Paolo Tironi paolo.tironi85 at gmail.com
Wed Jul 16 07:50:50 PDT 2008


Hi, I've some problems using bro (offline). When I set a policy on bro to
scan a dump file it happens I have this warnings:

/usr/local/bro/policy//scan.bro, line 92: warning: no such host:
j5004.inktomisearch.com
/usr/local/bro/policy//scan.bro, line 92: warning: no such host:
j5005.inktomisearch.com
/usr/local/bro/policy//scan.bro, line 93: warning: no such host:
j5006.inktomisearch.com
/usr/local/bro/policy//scan.bro, line 93: warning: no such host:
j100.inktomi.com
/usr/local/bro/policy//scan.bro, line 93: warning: no such host:
j101.inktomi.com
/usr/local/bro/policy//scan.bro, line 94: warning: no such host:
j3002.inktomi.com
/usr/local/bro/policy//scan.bro, line 94: warning: no such host:
si3000.inktomi.com
/usr/local/bro/policy//scan.bro, line 94: warning: no such host:
si3001.inktomi.com
/usr/local/bro/policy//scan.bro, line 95: warning: no such host:
si3002.inktomi.com
/usr/local/bro/policy//scan.bro, line 95: warning: no such host:
si3003.inktomi.com
/usr/local/bro/policy//scan.bro, line 95: warning: no such host:
si4000.inktomi.com
/usr/local/bro/policy//scan.bro, line 96: warning: no such host:
si4001.inktomi.com
/usr/local/bro/policy//scan.bro, line 96: warning: no such host:
si4002.inktomi.com
/usr/local/bro/policy//scan.bro, line 96: warning: no such host:
wm3018.inktomi.com

Everytime I have this warnings I have also some errors like:

/usr/local/bro/policy//ftp.bro, line 48: run-time error: error compiling
pattern /(^?.*(.*\.rhosts))|(^?.*(.*\.forward))/


and bro don't create any log or alarm.
I don't understand this error. Can you help me?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20080716/96d55fc5/attachment.html 


More information about the Bro mailing list