[Bro] Integrating WiFi Analyzer within Bro

[pratik inamdar]

Hi,

Thank you for your reply!

Is BinPac parser the only way to generate an analyzer for a protocol? What
is other way I can do it?

Because as far as I know, BinPac also generated 3 files automatically in
base/scripts folder which cannot be done manually. Please let me know
another way I could do it without using BinPac.

Please shed some light on this.

Thanks,
Pratik inamdar
On Mar 21, 2016 08:28, "Vlad Grigorescu" <vladg at illinois.edu> wrote:

> Unfortunately, there is no way to implement lower level protocols with
> BinPAC quickstart right now. Similary, we don't have any examples of a
> BinPAC lower-level analyzer if you were to do it manually.
>
> If you are able to get it working, I'd certainly be interested in how
> you did it, and would look at adding it to binpac_quickstart.
>
>   --Vlad
>
> pratik inamdar <pratikinamdar at gmail.com> writes:
>
> > [ text/plain ]
> > Hi,
> >
> > In my project, I am integrating a WiFi protocol analyzer with bro to
> parse
> > and monitor WiFi packets header information.
> >
> > I am using BinPac to generate template for the WiFi protocol analyzer in
> > the src/analyzer/protocol directory.
> >
> > As per my knowledge WiFi(802.11) is not a TCP type of protocol. So I wish
> > to know what should I use instead of the option "--tcp" while using the
> > command:
> >
> > python start.py WiFi "WiFi Protocol" ../bro --tcp
> >
> > Any help will be really appreciated!
> >
> > --
> >
> > Thanks & Regards.
> >
> > Pratik Inamdar
> > [ text/plain ]
> > _______________________________________________
> > Bro mailing list
> > bro at bro-ids.org
> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160321/59ba3cff/attachment.html