On Nov 12, 2012, at 5:53 PM, Jonathan Siwek <[email protected]> wrote:

>   Added another parameter to modbus events that carry register arrays to
>    the script-layer which indicates the associated byte count from the
>    message (allowing for invalid values to be detected):


I actually don't like this.  If an invalid value is found, I'd rather that a 
protocol violation or weird gets generated instead since it actually indicates 
a protocol error (I believe it does in this case at least).

What do you think about that?

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/


_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

Reply via email to