[Bro] local_orig , local_resp field implementation error

ps sunu pssunu6 at gmail.com
Fri Jun 29 01:49:39 PDT 2018


In conn.log  local_orig , local_resp fields implemented  like below so i
done same implementation in files.log and ssl.log  , but i am facing one
problem ,ssl log says local_orig is true
but files log says local_orig is false


conn.log

if( |Site::local_nets| > 0 )
        {
        c$conn$local_orig=Site::is_local_addr(c$id$orig_h);
        c$conn$local_resp=Site::is_local_addr(c$id$resp_h);
        }


ssl.log

if( |Site::local_nets| > 0 )
   {
   c$ssl$local_orig=Site::is_local_addr(c$id$orig_h);
   c$ssl$local_resp=Site::is_local_addr(c$id$resp_h);
   }

files.log


 if( |Site::local_nets| > 0 )
    {
    f$info$local_orig=Site::is_local_addr(c$id$orig_h);
    f$info$local_resp=Site::is_local_addr(c$id$resp_h);
    }



Regards,
Sunu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180629/d3231fa7/attachment.html 


More information about the Bro mailing list