[Bro] Error when extracting URLs from email traffic

Justin Azoff JAzoff at albany.edu
Tue Jul 8 10:28:32 PDT 2014


On Tue, Jul 08, 2014 at 01:02:01PM -0400, Josh Liburdi wrote:
> Actually, nevermind. fmt() will accept either version if you are
> passing data into it. I copied your script and removed some elements
> (const mail_servers, logic checks for SMTP and mail_servers) and it
> processed correctly.

That works correctly most of the time, but it has the same problem that printf does:

    jazoff at air  /tmp  $ cat f.bro
    event bro_init() {
        local s = "hello %s world";
        print fmt(s);
    }

    jazoff at air  /tmp  $ bro f.bro
    error in ./f.bro, line 3 and ./f.bro, line 2: too few arguments for format (fmt(s) and hello %s world)


-- 
-- Justin Azoff



More information about the Bro mailing list