[Bro] Crash on SMB Analyzer - Tree Connect AndX

Mike Sconzo sconzo at visiblerisk.com
Thu Nov 29 08:33:57 PST 2012


I've been seeing these too for whatever it's worth.

1352906659.976267 fatal error in <no location>: Val::CONST_ACCESSOR
(record/string) ([stime=1352906659.942897, uid=V40HxsmOMT5, message=HTTP
1.1 Without Referer Client Header])

I was going to attempt to re-write the script in a different way to see if
I can get it to stop tickling whatever it is.


On Thu, Nov 29, 2012 at 7:58 AM, Seth Hall <seth at icir.org> wrote:

>
> On Nov 29, 2012, at 8:22 AM, Seth Hall <seth at icir.org> wrote:
>
> > Actually… I did some work last night and I'll be pushing out some
> changes to my topic/seth/smb-smb2-work branch that fully updates it to
> master in a few minutes (there were a number of merge conflicts).
>
>
> Be a little carefully with this branch at the moment, I actually have file
> extraction turned on by default (yes, I went ahead and built file
> extraction and identification into it :) ).
>
>   .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>



-- 
cat ~/.bash_history > documentation.txt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20121129/47b8ea7e/attachment.html 


More information about the Bro mailing list