[Bro] [Bro type clash]

erik clark philosnef at gmail.com
Thu Nov 24 11:48:24 PST 2016


---
I want to check if

n$id$orig_h

contains a valid ip address.
---

In the framework there is already something that does this....

https://www.bro.org/sphinx/scripts/base/utils/addrs.bro.html

Specifically:

is_valid_ip
<https://www.bro.org/sphinx/scripts/base/utils/addrs.bro.html#id-is_valid_ip>
: function
<https://www.bro.org/sphinx/script-reference/types.html#type-function>
<https://www.bro.org/sphinx/script-reference/types.html#type-function>

This is a VERY useful function, as it validates both ipv4 and ipv6....
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161124/3c87b7f7/attachment.html 


More information about the Bro mailing list