[Bro] Bro with PPPoE [was Re: HTTP not being seen]

Seth Hall seth at icir.org
Mon Sep 16 09:52:07 PDT 2013


On Sep 16, 2013, at 12:29 PM, James Lay <jlay at slave-tothe-box.net> wrote:

> /usr/local/bro/share/bro/policy/frameworks/software/vulnerable.bro, line 
> 41: BroType::AsRecordType (table/record) (set[record { min:record { 
> major:count; minor:count; minor2:count; minor3:count; addl:string; }; 
> max:record { major:count; minor:count; minor2:count; minor3:count; 
> addl:string; }; }])


Your local.bro is probably using the old style for defining vulnerable software.  You could just comment that out for now.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130916/f837ddb1/attachment.bin 


More information about the Bro mailing list