[Zeek] port-Knocking bro script error
ps sunu
pssunu6 at gmail.com
Fri Jan 11 10:05:17 PST 2019
thanks for the update!
On Fri, Jan 11, 2019 at 11:20 PM Aashish Sharma <asharma at lbl.gov> wrote:
> hello Sunu,
>
> Actually, I never finished writing the check-port-knock.bro -
>
> Don't use it :) I think it should have been commented out in #__load__.bro
>
> I'll make sure github doesn't include the unfinished version.
>
> Sorry about that.
>
> Aashish
>
> On Fri, Jan 11, 2019 at 10:34:23PM +0530, ps sunu wrote:
> > Hi
> > I am using below script for port-knocking i am getting
> error
> >
> >
> https://github.com/initconf/scan-NG/blob/master/scripts/check-port-knock.bro
> > http://try.bro.org/#/trybro/saved/292398
> >
> > below part is getting error
> >
> > if (orig !in Scan::known_scanners)
> > {
> > if (|likely_port_scanner[orig,resp]| ==
> > HIGH_THRESHOLD_LIMIT && high_threshold_flag )
> > {
> > result = T ;
> > }
> > else if (|likely_port_scanner[orig,resp]| ==
> > MED_THRESHOLD_LIMIT && medium_threshold_flag )
> > {
> > result = T ;
> >
> >
> > error in ././trybro.bro, line 115: unknown identifier
> Scan::known_scanners,
> > at or near "Scan::known_scanners"
> >
> >
> > Regards
> > Sunu
>
> S
> > _______________________________________________
> > Zeek mailing list
> > zeek at zeek.org
> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190111/8b8a834c/attachment.html
More information about the Zeek
mailing list