[Bro] conditional loading

Grant Stavely grant at grantstavely.com
Mon Nov 30 19:42:17 PST 2015


Innelegant but I just have the same process that creates populated files create empty ones for bro to @load in environments where they aren't applicable and e.g. a puppet template would be overkill.

Grant

> On Nov 30, 2015, at 19:16, anthony kasza <anthony.kasza at gmail.com> wrote:
> 
> I have no clue if it would work but... You could try to make a global variable in the script you're testing for (something like global is_loaded: bool) then check if it is defined with @ifdef. If so, the script was loaded.
> 
> -AK
> 
>> On Nov 30, 2015 6:43 PM, "Dk Jack" <dnj0496 at gmail.com> wrote:
>> the directives don't seem to have file test operators. I tried to do the following...
>> 
>> local c = "test -f filters.bro";
>> local cmd = Exec::Command($cmd=c);
>> 
>> when (local res = Exec::run(cmd))
>> {
>>   @if (res$exit_code == 0)
>>   {
>>     @load filters.bro;
>>   }
>> }
>> 
>> 
>> However, I am getting parsing errors...
>> 
>> ---------------------------------------------------------------
>> referencing a local name in @if (res)
>> invalid expression in @if (res$exit_code == 0)
>> ---------------------------------------------------------------
>> 
>> Dnj
>> 
>> 
>>> On Mon, Nov 30, 2015 at 4:41 PM, anthony kasza <anthony.kasza at gmail.com> wrote:
>>> See here:
>>> https://www.bro.org/sphinx/script-reference/directives.html
>>> 
>>> -AK
>>> 
>>>> On Nov 30, 2015 4:36 PM, "Dk Jack" <dnj0496 at gmail.com> wrote:
>>>> Hi,
>>>> Is it possible to perform conditional loading of bro script files ?
>>>> In my local.bro file, I'd like to do something like this:
>>>> 
>>>> if file 'filters.bro' exists
>>>> {
>>>> @load filters.bro
>>>> }
>>>> 
>>>> The file filters.bro may or may not exist because it's getting generated from an external program.
>>>> Thanks for your help in advance.
>>>> 
>>>> Dnj
>>>> 
>>>> _______________________________________________
>>>> Bro mailing list
>>>> bro at bro-ids.org
>>>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20151130/b7a64d36/attachment.html 


More information about the Bro mailing list