[
https://bro-tracker.atlassian.net/browse/BIT-1256?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jon Siwek updated BIT-1256:
---------------------------
Fix Version/s: 2.4
> file_state_remove event after bro_done
> --------------------------------------
>
> Key: BIT-1256
> URL: https://bro-tracker.atlassian.net/browse/BIT-1256
> Project: Bro Issue Tracker
> Issue Type: Problem
> Components: Bro
> Affects Versions: git/master, 2.3
> Environment: CentOS 6
> Reporter: Jimmy Jones
> Fix For: 2.4
>
> Attachments: fa.bro, weird8.pcap
>
>
> Using the attached bro script (just prints in bro_done and file_state_remove
> events) and capture, the bro_done event is fired before file_state_remove.
--
This message was sent by Atlassian JIRA
(v6.4-OD-05-008#64003)
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
