[
https://bro-tracker.atlassian.net/browse/BIT-180?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Seth Hall updated BIT-180:
--------------------------
Resolution: Invalid
Status: Closed (was: Open)
Wow! Another secondary path ticket!
> field value missing in secondary filter
> ---------------------------------------
>
> Key: BIT-180
> URL: https://bro-tracker.atlassian.net/browse/BIT-180
> Project: Bro Issue Tracker
> Issue Type: Problem
> Components: Bro
> Affects Versions: 1.5.2
> Reporter: Robin Sommer
>
> This is with trunk as of r6926, with a plain ./configure.
> bro \-r ~/data/traces/surfing all
> Unknown destination <no-destination-given>
> Unknown destination <no-destination-given>
> ((vlan) and ((not (port 25 or port 587)) and (not (port 80 or port 8000 or
> port 8080)))) and (((((((((((((((((((((((((((((((((((((((((((tcp port 514) or
> (udp)) or (tcp port 989)) or (tcp port 994)) or (tcp dst port 80 or tcp dst
> port 8080 or tcp dst port 8000)) or (port 110)) or (port 6667)) or (tcp port
> 113)) or (tcp)) or (tcp port 585)) or (tcp port 614)) or (tcp port 990)) or
> (port 2049)) or (tcp port 524)) or (port 445)) or (tcp port 992)) or (port
> ftp)) or (port telnet or tcp port 513)) or ((ip[6:2] & 0x3fff \!= 0) and
> tcp)) or (arp)) or (tcp[13] & 7 \!= 0)) or (port 135)) or (port 53)) or (udp
> port 137)) or (udp port 69)) or (udp port 2002 and src net 134.96)) or
> (icmp)) or (tcp port 443)) or (tcp port 563)) or (tcp port 995)) or (port
> finger)) or ((ip[6:2] & 0x3fff \!= 0) and udp)) or (port 6346 or port 8436))
> or (tcp port smtp or tcp port 587)) or (tcp port 22)) or (port 6666)) or
> (port 111)) or (tcp port 22)) or (tcp port 993)) or (tcp)) or (tcp src port
> 80 or tcp!
src port 8080 or tcp src port 8000)) or (tcp port 636)) or (udp port 123))
> a_udp_event()
> 1144876537.668448 ../policy/secondary-filter.bro, line 15 (pkt$udp): internal
> error: field value missing
--
This message was sent by Atlassian JIRA
(v6.2-OD-09-036#6252)
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
