[Bro] Bro v241 locked with pcap file ?
rmkml
rmkml at ligfy.org
Mon Mar 28 12:05:36 PDT 2016
Hi,
I have replayed many pcap files on Bro v2.4.1,
but discovered one pcap "lock" bro process (bro never quit).
Simply replay: bro241 -r bro241lock.pcap
<no error, bro never quit>
Added -C or -b or 'export BRO_DNS_FAKE=1' have same pb.
Please find a joigned a pcap file link:
http://etplc.org/bro241lock.pcap.gz
(This partial file sended to bro list around 2009 not by me...)
Open ticket BIT-1562 on Bro Tracker.
Tested on Ubuntu v14.04.4 LTS.
Regards
@Rmkml
More information about the Bro
mailing list