Jimmy Jones created BIT-1256:
--------------------------------
Summary: file_state_remove event after bro_done
Key: BIT-1256
URL: https://bro-tracker.atlassian.net/browse/BIT-1256
Project: Bro Issue Tracker
Issue Type: Problem
Components: Bro
Affects Versions: 2.3, git/master
Environment: CentOS 6
Reporter: Jimmy Jones
Attachments: fa.bro, weird8.pcap
Using the attached bro script (just prints in bro_done and file_state_remove
events) and capture, the bro_done event is fired before file_state_remove.
--
This message was sent by Atlassian JIRA
(v6.4-OD-05-008#64003)
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
