[Bro] SMB Event Prototype Issue

[McMahon, Kevin J]

How broken is it?  I'm willing to start fixing it -- if it's a reasonably good starting point.

While I'm reasonably new to Bro, I have made quite a few mods to my FTP and HTTP scripts for local customization as well as a few minor mods in the analyzers for the same reasons (one of which is a bug that I've been negligent in supplying back to the community -- but I'm working on it).

Kevin


-----Original Message-----
From: Seth Hall [mailto:seth at icir.org] 
Sent: Friday, February 28, 2014 12:21 PM
To: McMahon, Kevin J
Cc: 'Pearson, David'; bro at bro.org
Subject: Re: [Bro] SMB Event Prototype Issue


On Feb 28, 2014, at 10:41 AM, "McMahon, Kevin J" <kmcmahon at mitre.org> wrote:

> I've been interested in utilizing the SMB analyzer on Bro as well.  Where did you find Seth's github data on SMB?
>  
> And, are you interested in collaborating on the porting of the SMB scripts?=

Unfortunately that branch is extremely broken.  

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/