[Bro] Bro v241 locked with pcap file ?

rmkml rmkml at ligfy.org
Mon Mar 28 12:05:36 PDT 2016


Hi,

I have replayed many pcap files on Bro v2.4.1,

but discovered one pcap "lock" bro process (bro never quit).

Simply replay: bro241 -r bro241lock.pcap
  <no error, bro never quit>

Added -C or -b or 'export BRO_DNS_FAKE=1' have same pb.

Please find a joigned a pcap file link:
  http://etplc.org/bro241lock.pcap.gz
(This partial file sended to bro list around 2009 not by me...)

Open ticket BIT-1562 on Bro Tracker.

Tested on Ubuntu v14.04.4 LTS.

Regards
@Rmkml


More information about the Bro mailing list