[Bro] local_orig , local_resp field implementation error
ps sunu
pssunu6 at gmail.com
Fri Jun 29 01:49:39 PDT 2018
In conn.log local_orig , local_resp fields implemented like below so i
done same implementation in files.log and ssl.log , but i am facing one
problem ,ssl log says local_orig is true
but files log says local_orig is false
conn.log
if( |Site::local_nets| > 0 )
{
c$conn$local_orig=Site::is_local_addr(c$id$orig_h);
c$conn$local_resp=Site::is_local_addr(c$id$resp_h);
}
ssl.log
if( |Site::local_nets| > 0 )
{
c$ssl$local_orig=Site::is_local_addr(c$id$orig_h);
c$ssl$local_resp=Site::is_local_addr(c$id$resp_h);
}
files.log
if( |Site::local_nets| > 0 )
{
f$info$local_orig=Site::is_local_addr(c$id$orig_h);
f$info$local_resp=Site::is_local_addr(c$id$resp_h);
}
Regards,
Sunu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180629/d3231fa7/attachment.html
More information about the Bro
mailing list