[Bro] field value missing error

ps sunu pssunu6 at gmail.com
Fri May 13 13:01:08 PDT 2016


module Musers;


export {
        redef enum Log::ID += { MUSER::LOG };

        type Info: record {

                ts:               time    &log;

                id :       conn_id &log &optional;


                orig_user:         string &log &optional;

               resp_user:         string &log &optional;
        };



        global log_muser: event(rec: Info);
}

redef record connection += {
        muser: Info &optional;
};










global host_name_user: table[addr] of string &synchronized
&write_expire=7day;
global host_name_user1: table[addr] of string &synchronized
&write_expire=7day;

# Create the Tor log stream and load the Tor list
event bro_init()
{
Log::create_stream(MUSER::LOG, [$columns=Info, $ev=log_muser]);

}


event KRB::log_krb (rec: KRB::Info)
{

  host_name_user1[rec$id$orig_h] = rec$client;




}


event RADIUS::log_radius (rec: RADIUS::Info)

{

host_name_user[rec$id$orig_h] = rec$username;

}





function set_session(c: connection)
{
if ( ! c?$muser )
        {
        add c$service["muser"];
        c$muser = [$ts=network_time(),$id=c$id];
        }
}

# Function to convert blutmagie Tor flags from count to bool
#function convert_flag(flag: count): bool
#{
#if ( flag == 1 )
#       return T;
#else return F;
#}

# Function to set data in the Tor info record


# Check each new connection for an IP address in the Tor list
event new_connection(c: connection )
{

 set_session(c);

  if ( c$id$orig_h in Musers::host_name_user )
    c$muser$orig_user = Musers::host_name_user[c$id$orig_h];

  if ( c$id$resp_h in Musers::host_name_user )
    c$muser$resp_user = Musers::host_name_user[c$id$resp_h];


if ( c$id$orig_h in Musers::host_name_user1 )


#local  mist120 =  host_name_user1[c$id$orig_h];
{
if  ( host_name_user1[c$id$orig_h] ==
 /^([A-Za-z0-9._\.-]+)([\/])([\da-zA-Z\.-]+)\.([a-zA-Z\.]{2,6})$/ )
{

print fmt ("orig");

c$muser$orig_user = Musers::host_name_user1[c$id$orig_h];

}



if (  c$id$resp_h  in Musers::host_name_user1 )


#local mist130 =  host_name_user1[c$id$resp_h];

if  ( host_name_user1[c$id$resp_h]
 ==/^([A-Za-z0-9._\.-]+)([\/])([\da-zA-Z\.-]+)\.([a-zA-Z\.]{2,6})$/ )
{

print fmt ("resp");
c$muser$resp_user = Musers::host_name_user1[c$id$resp_h];

}

}

}




event connection_state_remove(c: connection)
{
if ( c?$muser )
        {
        Log::write(MUSER::LOG, c$muser);
        }
}


               This is my sample code, while running this i am getting
below error
virtual-machine:~/Newlogs$ sudo bro -C
contrained-delegation/Krb-contrained-delegation.cap  Musers.bro
orig
1139998844.531337 expression error in ./Musers.bro, line 51: field value
missing [Musers::rec$client]

            that error line no 51 is marked as red ,any problem in this
code ?


Regards,
Sunu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160514/a02bfe34/attachment-0001.html 


More information about the Bro mailing list