[Bro] ssh alternative ports
Robin Gruyters
r.gruyters at snow.nl
Wed Nov 12 00:23:32 PST 2008
Robin,
Okay, I have attached a patch for ssh.bro, which includes exported ssh_ports and
ssh_log.
With kind regards,
Robin Gruyters
Quoting Robin Sommer <robin at icir.org>:
>
> On Tue, Nov 11, 2008 at 09:21 +0100, you wrote:
>
> > bro at nsm$ bro -r test.lpc tcp weird alarm ssh test print-filter
> > ./test.bro, line 12 (SSH::ssh_ports): error, "redef" used but not
> previously defined
>
> You indeed need the SSH prefix. Using that, I get a different error
> message:
>
> # bro -r test.lpc tcp weird alarm ssh ./test.bro print-filter
> ./test.bro, line 11: error: identifier is not exported: SSH::ssh_ports
>
> Which is true: the id is not exported in ssh.bro and therefore
> can't be redefined (I think it should be exported though).
>
> Robin
>
> --
> Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org
> ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ssh.bro.diff
Type: application/octet-stream
Size: 743 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20081112/cd235333/attachment-0001.obj
More information about the Bro
mailing list