[Bro] credit-card-exposure script
Seth Hall
seth at icir.org
Tue Feb 2 11:42:44 PST 2016
Thanks for the traffic, there were some lingering bugs. I also added an option to make it work for the traffic you sent me.
redef CreditCardExposure::use_cc_separators=F;
That will make the script validate long strings of digits (it only worked if the CC# had internal separators before).
Thanks!
.Seth
> On Feb 2, 2016, at 11:56 AM, Seth Hall <seth at icir.org> wrote:
>
> Could you send me some traffic that you think it should catch but isn't? (you can send privately)
>
> .Seth
>
>> On Feb 2, 2016, at 11:53 AM, vincent at ragosta.net wrote:
>>
>>> Sorry about that. No one had commented that that script didn't work in
>>> 2.4. It works now.
>>
>> Bro loads the script without generating an error. However, I still do
>> not see any alerts appearing in notice.log.
>>
>> Anything special I need to do to have it log this alert?
>>
>> Thanks!
>> _______________________________________________
>> Bro mailing list
>> bro at bro-ids.org
>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>>
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
More information about the Bro
mailing list