Robin: 

Any plans to get the new scan detection policies in 2.2 ? 

Aashish 

On Tue, Apr 02, 2013 at 12:40:28PM -0700, Robin Sommer wrote:
> To collect where we are, here's what I believe we want to have in 2.2:
> 
>     - Measurement framework (mostly done; Seth)
>         - With Bloom filters and Hyperloglog? (state?; Soumya/Bernhard/Seth)
>     - File analysis framework (mostly done; Jon)
>         - With Windows executable analyzer (state?; Seth)
>     - Sqlite/Postgresql readers/writers (mostly done?; Bernhard)
>     - BroControl test-suite (state?; Daniel)
>     - Fix for BroControl's log archival, #970 (state?; Daniel)
>     - Internal analyzer reorg (partially done; Robin)
>     - Thread state cleanup (done, needs testing with input framework; 
> Robin/Bernhard)
>     - DNP3 (mostly done; Hui)
>     - DHCP (state?; Vlad)
>     - Input framework extensions for exec module (mostly done; Bernhard/Seth)
> 
>     - Documentation (can wait for beta period)
>         - Scripting guide (whatever is ready; Scott)
>         - Remaining parts from old Wiki (Daniel)
>         - Overall cleanup
> 
> How does that look? Anything else in terms of larger tasks (there are
> plenty smaller items in tickets of course, though we'll probably end
> up bumping quite a few again).
> 
> Robin
> 
> -- 
> Robin Sommer * Phone +1 (510) 722-6541 *     [email protected]
> ICSI/LBNL    * Fax   +1 (510) 666-2956 * www.icir.org/robin
> _______________________________________________
> bro-dev mailing list
> [email protected]
> http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

-- 
Aashish Sharma  ([email protected])                                
Cyber Security, Information Technology Division  
Lawrence Berkeley National Laboratory  
http://www.lbl.gov/cyber/pgp-aashish.txt 
Office: (510)-495-2680  Cell: (510)-457-1525

Attachment: pgpem7l9Infa1.pgp
Description: PGP signature

_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

Reply via email to