[Bro] Hui Lin_NOTICE function redefinition error

Hui Lin (Hugo) hlin33 at illinois.edu
Fri Jan 13 20:34:08 PST 2012


Well this is what my codes look like. I just call NOTICE function within
one of my event handler.

@load notice
@load /home/hugo/experiment/dnp3/policy/dnp3headers_sl.bro

redef enum Notice += {
       CriState,    # notice for my semantic signature matching; critical
state
};

......

event dnp3_crob(c: connection, is_orig: bool, control_code: count, count8:
count, on_time: count, off_time: count, status_code: count)
{
        .....
        NOTICE([$note=CriState,
                $msg="Test CriState is recoreded",
                $conn=c]);
        .....
}

On Fri, Jan 13, 2012 at 10:27 PM, Seth Hall <seth at icir.org> wrote:

>
> On Jan 13, 2012, at 11:18 PM, Hui Lin (Hugo) wrote:
>
> > When I load notice and use NOTICE function in my script, there is a
> error message
> >
> > error in /usr/local/bro/share/bro/base/frameworks/notice/./main.bro,
> line 569: already defined (NOTICE)
>
> You're going to need to show a snippet of code that causes this error. :)
>
>  .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>
>


-- 
Hui Lin
Research Assistant
DEPEND Research Group, ECE Department
University of Illinois at Urbana-Champaign
hlin33 at illinois.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120113/507bd6a2/attachment.html 


More information about the Bro mailing list