[Bro] Crash on SMB Analyzer - Tree Connect AndX

Seth Hall seth at icir.org
Thu Nov 29 05:22:08 PST 2012


On Nov 29, 2012, at 12:33 AM, Mike Kolkebeck <mkolkebeck at gmail.com> wrote:

> If I use your in-progress branch, would this impact other Bro functionality, or could I isolate the update to just smb analyzer functionality?

Probably, but I really need to merge the master branch into that branch so it should only be the SMB fixes in that branch that differ from master.  There may be some merge conflicts, I don't really know.

Actually… I did some work last night and I'll be pushing out some changes to my topic/seth/smb-smb2-work branch that fully updates it to master in a few minutes (there were a number of merge conflicts).  

>> Would you be interested in putting the scripts up somewhere?
>> 
> It's still a crude work in progress, but here is the full bro script that I'm currently using:

Cool, nice. :)

If you 

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/





More information about the Bro mailing list