On Mar 13, 2014, at 10:30 AM, Robin Sommer <[email protected]> wrote: > On Thu, Mar 13, 2014 at 00:17 -0700, Bernhard Amann wrote: > >> You apparently have to be very careful which EndOfFile function of >> the file analysis framework you call... otherwhise it might try >> to close another file id. This took me quite a while to find. > > Can you elaborate? I sense an opportuntity to improve our API. :-)
I think he was running into the interplay between script land and the core. Actually, I think that for the SSL/TLS analyzer, this is one of the times we don't need a file id generated in script land. That's probably a better choice in this case. .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro.org/
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
