[Bro] smb crashing workers

[Seth Hall]

On Mar 6, 2013, at 7:09 PM, Mike Kolkebeck <mkolkebeck at gmail.com> wrote:

> I know the smb analyzer still has a few bugs in Bro-2.1 , but is there any way to prevent/catch the bro workers from infrequently crashing (~2-3 times per day, under peak periods)?

Yep, don't enable the SMB analyzer in 2.1. :)  

We don't have any scripts that enable it or use it because it's not ready and very incomplete in the 2.1 release.  Are you getting some logs or anything from it?

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/