[Zeek] port-Knocking bro script error

ps sunu pssunu6 at gmail.com
Fri Jan 11 10:05:17 PST 2019


thanks for the update!

On Fri, Jan 11, 2019 at 11:20 PM Aashish Sharma <asharma at lbl.gov> wrote:

> hello Sunu,
>
> Actually, I never finished writing the check-port-knock.bro -
>
> Don't use it :) I think it should have been commented out in #__load__.bro
>
> I'll make sure github doesn't include the unfinished version.
>
> Sorry about that.
>
> Aashish
>
> On Fri, Jan 11, 2019 at 10:34:23PM +0530, ps sunu wrote:
> > Hi
> >             I am using below script for  port-knocking   i am getting
> error
> >
> >
> https://github.com/initconf/scan-NG/blob/master/scripts/check-port-knock.bro
> > http://try.bro.org/#/trybro/saved/292398
> >
> > below part is getting error
> >
> > if (orig !in Scan::known_scanners)
> >         {
> >                 if (|likely_port_scanner[orig,resp]| ==
> > HIGH_THRESHOLD_LIMIT && high_threshold_flag )
> >                 {
> > result = T ;
> >                 }
> >                 else if (|likely_port_scanner[orig,resp]| ==
> > MED_THRESHOLD_LIMIT && medium_threshold_flag )
> >                 {
> > result = T ;
> >
> >
> > error in ././trybro.bro, line 115: unknown identifier
> Scan::known_scanners,
> > at or near "Scan::known_scanners"
> >
> >
> > Regards
> > Sunu
>
> S
> > _______________________________________________
> > Zeek mailing list
> > zeek at zeek.org
> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190111/8b8a834c/attachment.html 


More information about the Zeek mailing list