[Bro] Plugin regex issue

Josh Liburdi liburdi.joshua at gmail.com
Sat Dec 5 07:59:42 PST 2015


Well, later turned out to come a lot sooner than I thought. I tested it with my second analyzer plugin and all is well. Thanks again!

Josh

> On Dec 5, 2015, at 10:52 AM, Josh Liburdi <liburdi.joshua at gmail.com> wrote:
> 
> Thanks Robin, it looks like it fixed the issue I was having with this analyzer. I have another analyzer that primarily uses regex for the protocol parsing, so I’ll try that later and verify it works as well. 
> 
> Will the fix you pushed to git be available in the Bro 2.5 release, or will it be packaged and available sooner than that?
> 
> Thanks!
> Josh
> 
>> On Dec 4, 2015, at 8:51 PM, Robin Sommer <robin at icir.org> wrote:
>> 
>> 
>> 
>> On Tue, Dec 01, 2015 at 15:38 -0500, Josh Liburdi wrote:
>> 
>>> In the record above, when used as a plugin, the magic_cookie is
>>> skipped. When compiled, it works as expected.
>> 
>> Turns out it's a problem with the order in which the BinPAC system is
>> initialized. I just pushed a fix for Bro to git, that seems to solve
>> it. Give it a try.
>> 
>> Robin
>> 
>> -- 
>> Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin
> 




More information about the Bro mailing list