[Bro] modifying bro.init
daniela.miao at utoronto.ca
daniela.miao at utoronto.ca
Thu Feb 4 18:01:23 PST 2010
Hi Vern,
It appears that you're absolutely right, my bad, thanks again!
Daniela
Quoting Vern Paxson <vern at icir.org>:
>> ignore the checksum errors, since now it's giving me an "unrecognized
>> character" error.
>
> That usually means you left off a -r running against a trace, like
>
> bro foo.trace http-request
>
> rather than
>
> bro -r foo.trace http-request
>
> Bro is then trying to parse foo.trace as a script and the low-level scanner
> flags an impossible (8-bit) character.
>
> Vern
>
More information about the Bro
mailing list