[Bro] ssh alternative ports

Robin Gruyters r.gruyters at snow.nl
Wed Nov 12 00:23:32 PST 2008


Robin,

Okay, I have attached a patch for ssh.bro, which includes exported ssh_ports and
ssh_log.

With kind regards,

Robin Gruyters


Quoting Robin Sommer <robin at icir.org>:

> 
> On Tue, Nov 11, 2008 at 09:21 +0100, you wrote:
> 
> > bro at nsm$ bro -r test.lpc tcp weird alarm ssh test print-filter
> > ./test.bro, line 12 (SSH::ssh_ports): error, "redef" used but not
> previously defined
> 
> You indeed need the SSH prefix. Using that, I get a different error
> message:
> 
> # bro -r test.lpc tcp weird alarm ssh ./test.bro print-filter 
> ./test.bro, line 11: error: identifier is not exported: SSH::ssh_ports
> 
> Which is true: the id is not exported in ssh.bro and therefore
> can't be redefined (I think it should be exported though).
> 
> Robin
> 
> -- 
> Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
> ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ssh.bro.diff
Type: application/octet-stream
Size: 743 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20081112/cd235333/attachment-0001.obj 


More information about the Bro mailing list