[Bro] Crash on SMB Analyzer - Tree Connect AndX

[Mike Sconzo]

Possible fix, try renaming some variables. I had a variable named "con" in
my script and renaming that to conseen fixed the issue (or seemed to so
far). I've been seeing crashing at least once an hour and now it's been > 2
hours w/o a worker crash. Have you tried renaming path_name to something
else?


On Thu, Nov 29, 2012 at 10:33 AM, Mike Sconzo <sconzo at visiblerisk.com>wrote:

> I've been seeing these too for whatever it's worth.
>
> 1352906659.976267 fatal error in <no location>: Val::CONST_ACCESSOR
> (record/string) ([stime=1352906659.942897, uid=V40HxsmOMT5, message=HTTP
> 1.1 Without Referer Client Header])
>
> I was going to attempt to re-write the script in a different way to see if
> I can get it to stop tickling whatever it is.
>
>
> On Thu, Nov 29, 2012 at 7:58 AM, Seth Hall <seth at icir.org> wrote:
>
>>
>> On Nov 29, 2012, at 8:22 AM, Seth Hall <seth at icir.org> wrote:
>>
>> > Actually… I did some work last night and I'll be pushing out some
>> changes to my topic/seth/smb-smb2-work branch that fully updates it to
>> master in a few minutes (there were a number of merge conflicts).
>>
>>
>> Be a little carefully with this branch at the moment, I actually have
>> file extraction turned on by default (yes, I went ahead and built file
>> extraction and identification into it :) ).
>>
>>   .Seth
>>
>> --
>> Seth Hall
>> International Computer Science Institute
>> (Bro) because everyone has a network
>> http://www.bro-ids.org/
>>
>>
>> _______________________________________________
>> Bro mailing list
>> bro at bro-ids.org
>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>>
>
>
>
> --
> cat ~/.bash_history > documentation.txt
>
>


-- 
cat ~/.bash_history > documentation.txt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20121129/5f5e04ac/attachment.html