[Bro] bro exchange 2013 intel exercises

[Siwek, Jonathan Luke]

On May 19, 2014, at 12:39 AM, scott mcallester <scott at 0x4c.com> wrote:

> My intel.dat:
> #fields    indicator    indicator_type    meta.source
> fetchback.com        Intel::DOMAIN    my_special_source
> 
> I've double checked the tab spacing it all looks fine, but every time I run this I receive this error:
> bro -C -r exercise-traffic.pcap intel.bro 
> internal error: Value not found in enum mappimg. Module: GLOBAL, var: , var size: 0
> Aborted (core dumped)

Can you check that there’s only a single tab character between values?  In particular, if there is more than one tab between “fetchback.com” and “Intel::DOMAIN” I reproduce that error.

- Jon