[Zeek] port-Knocking bro script error
Mike Dopheide
dopheide at gmail.com
Fri Jan 11 09:24:30 PST 2019
My guess is you don't have scan.bro loaded ahead of that script.
On Fri, Jan 11, 2019 at 11:06 AM ps sunu <pssunu6 at gmail.com> wrote:
> Hi
> I am using below script for port-knocking i am getting error
>
>
> https://github.com/initconf/scan-NG/blob/master/scripts/check-port-knock.bro
> http://try.bro.org/#/trybro/saved/292398
>
> below part is getting error
>
> if (orig !in Scan::known_scanners)
> {
> if (|likely_port_scanner[orig,resp]| ==
> HIGH_THRESHOLD_LIMIT && high_threshold_flag )
> {
> result = T ;
> }
> else if (|likely_port_scanner[orig,resp]| ==
> MED_THRESHOLD_LIMIT && medium_threshold_flag )
> {
> result = T ;
>
>
> error in ././trybro.bro, line 115: unknown identifier
> Scan::known_scanners, at or near "Scan::known_scanners"
>
>
> Regards
> Sunu
>
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190111/fe23082a/attachment.html
More information about the Zeek
mailing list