[Bro] credit-card-exposure script

Seth Hall seth at icir.org
Wed Feb 3 06:15:28 PST 2016


> On Feb 3, 2016, at 7:46 AM, vincent at ragosta.net wrote:
> 
> I appreciate you looking at this so quickly, but I still cannot get a 
> notice to be raised with the latest changes. No error is reported and 
> the script is loaded. Is there anything else I can check to debug this?

Did you change that setting that I mentioned?  By default, that script is only watching for numbers with separators in them (like 1234-5678-9012-3456) but in the traffic you sent me, those numbers don't have internal separators.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the Bro mailing list