[Bro] conditional loading
Grant Stavely
grant at grantstavely.com
Mon Nov 30 19:42:17 PST 2015
Innelegant but I just have the same process that creates populated files create empty ones for bro to @load in environments where they aren't applicable and e.g. a puppet template would be overkill.
Grant
> On Nov 30, 2015, at 19:16, anthony kasza <anthony.kasza at gmail.com> wrote:
>
> I have no clue if it would work but... You could try to make a global variable in the script you're testing for (something like global is_loaded: bool) then check if it is defined with @ifdef. If so, the script was loaded.
>
> -AK
>
>> On Nov 30, 2015 6:43 PM, "Dk Jack" <dnj0496 at gmail.com> wrote:
>> the directives don't seem to have file test operators. I tried to do the following...
>>
>> local c = "test -f filters.bro";
>> local cmd = Exec::Command($cmd=c);
>>
>> when (local res = Exec::run(cmd))
>> {
>> @if (res$exit_code == 0)
>> {
>> @load filters.bro;
>> }
>> }
>>
>>
>> However, I am getting parsing errors...
>>
>> ---------------------------------------------------------------
>> referencing a local name in @if (res)
>> invalid expression in @if (res$exit_code == 0)
>> ---------------------------------------------------------------
>>
>> Dnj
>>
>>
>>> On Mon, Nov 30, 2015 at 4:41 PM, anthony kasza <anthony.kasza at gmail.com> wrote:
>>> See here:
>>> https://www.bro.org/sphinx/script-reference/directives.html
>>>
>>> -AK
>>>
>>>> On Nov 30, 2015 4:36 PM, "Dk Jack" <dnj0496 at gmail.com> wrote:
>>>> Hi,
>>>> Is it possible to perform conditional loading of bro script files ?
>>>> In my local.bro file, I'd like to do something like this:
>>>>
>>>> if file 'filters.bro' exists
>>>> {
>>>> @load filters.bro
>>>> }
>>>>
>>>> The file filters.bro may or may not exist because it's getting generated from an external program.
>>>> Thanks for your help in advance.
>>>>
>>>> Dnj
>>>>
>>>> _______________________________________________
>>>> Bro mailing list
>>>> bro at bro-ids.org
>>>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20151130/b7a64d36/attachment.html
More information about the Bro
mailing list