[Bro] New plugin usage: Error: " value used but not set"

John Donnelly jdonnelly at dyn.com
Fri Feb 6 07:36:16 PST 2015


using -B plugins I see:

 Registering component DNS_TELEMETRY (tag 13/0)


On Fri, Feb 6, 2015 at 8:30 AM, John Donnelly <jdonnelly at dyn.com> wrote:

> No indication it gets loaded:
>
> find /usr/local/bro | grep TELE
> /usr/local/bro/share/bro/base/bif/plugins/Bro_DNS_TELEMETRY.events.bif.bro
> root at dyn-x64-01:/work/jpd/dyn/src/bro-fork2/bro# export
> BRO_PLUGIN_PATH=/usr/local/bro/share/bro/base/bif/plugins
>
> /usr/local/bro/bin/bro  -i lo -i eth0 -i eth1   -b -C
> /usr/local/bro/share/bro/base/protocols/dns/telemetry_speed.bro
>
> listening on lo, capture length 8192 bytes
>
> listening on eth0, capture length 8192 bytes
>
> listening on eth1, capture length 8192 bytes
>
> 1423232941.050872 error in
> /usr/local/bro/share/bro/base/protocols/dns/telemetry_speed.bro, line 454:
> value used but not set (dns_telemetry_set_options)
> 1423232941.050872 error in
> /usr/local/bro/share/bro/base/protocols/dns/telemetry_speed.bro, line 508:
> value used but not set (dns_telemetry_load_anchor_map)
> 1423232941.050872 error in
> /usr/local/bro/share/bro/base/protocols/dns/telemetry_speed.bro, line 524:
> value used but not set (dns_telemetry_get_metrics)
>
>
>
>
>
> On Fri, Feb 6, 2015 at 8:18 AM, Seth Hall <seth at icir.org> wrote:
>
>>
>> > On Feb 6, 2015, at 8:48 AM, John Donnelly <jdonnelly at dyn.com> wrote:
>> >
>> > bro -N | grep DNS
>> > opened 'debug.log' debugging output
>> > Bro::DNS - DNS analyzer (built-in)
>> > Bro::DNS_Telemetry - DNS analyzer Telemetry (built-in)
>>
>> Oh, I’m sorry.   I thought you were writing this as an external/dynamic
>> plugin.
>>
>> Have you tried looking at the output if you load the misc/loaded-scripts
>> script?  That should show a file named something like this getting loaded…
>>
>> scripts/base/bif/plugins/Bro_DNS_TELEMETRY.events.bif.bro
>>
>>   .Seth
>>
>>
>> --
>> Seth Hall
>> International Computer Science Institute
>> (Bro) because everyone has a network
>> http://www.bro.org/
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150206/d2716b33/attachment.html 


More information about the Bro mailing list