[Zeek] port-Knocking bro script error

Mike Dopheide dopheide at gmail.com
Fri Jan 11 09:24:30 PST 2019


My guess is you don't have scan.bro loaded ahead of that script.

On Fri, Jan 11, 2019 at 11:06 AM ps sunu <pssunu6 at gmail.com> wrote:

> Hi
>             I am using below script for  port-knocking   i am getting error
>
>
> https://github.com/initconf/scan-NG/blob/master/scripts/check-port-knock.bro
> http://try.bro.org/#/trybro/saved/292398
>
> below part is getting error
>
> if (orig !in Scan::known_scanners)
>         {
>                 if (|likely_port_scanner[orig,resp]| ==
> HIGH_THRESHOLD_LIMIT && high_threshold_flag )
>                 {
> result = T ;
>                 }
>                 else if (|likely_port_scanner[orig,resp]| ==
> MED_THRESHOLD_LIMIT && medium_threshold_flag )
>                 {
> result = T ;
>
>
> error in ././trybro.bro, line 115: unknown identifier
> Scan::known_scanners, at or near "Scan::known_scanners"
>
>
> Regards
> Sunu
>
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190111/fe23082a/attachment.html 


More information about the Zeek mailing list