[Bro] Parsing Modbus packet with Function code 15

[Robin Sommer]

On Wed, May 14, 2014 at 03:08 -0700, Vishak Muthukumar wrote:

> I have a trace file which has a write request to write to coil 0.
> But when I monitor that trace file in my bro script, I cannot see the coil
> value. It says the size of the coil vector is empty.

Iirc, the analyzer doesn't further extract coil values yet.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 *     robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 * www.icir.org/robin