[Bro] modifying bro.init

daniela.miao at utoronto.ca daniela.miao at utoronto.ca
Thu Feb 4 18:01:23 PST 2010


Hi Vern,

It appears that you're absolutely right, my bad, thanks again!

Daniela

Quoting Vern Paxson <vern at icir.org>:

>> ignore the checksum errors, since now it's giving me an "unrecognized
>> character" error.
>
> That usually means you left off a -r running against a trace, like
>
> 	bro foo.trace http-request
>
> rather than
>
> 	bro -r foo.trace http-request
>
> Bro is then trying to parse foo.trace as a script and the low-level scanner
> flags an impossible (8-bit) character.
>
> 		Vern
>






More information about the Bro mailing list