[Bro] How can I invoke event tcp_option()?

[Thomas Tan]

Dear All,

I am new to Bro. I am testing the “*event tcp_option ()*”.  However, the
event is not invoked by the event engine.  Can anyone kindly advise me what
I have done wrong? My code is as follows.



------------------------------------------

@load base/protocols/conn



event bro_init() {

    print "Hello, World!";

}



event tcp_option (c:connection, is_orig:bool, opt:count, optlen:count){

                print "inside the tcp_option";

}



event bro_done() {

    print "Goodbye, World!";

}

-----------------------------------------



Best regards,


Thomas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20151007/8262815b/attachment.html