Re: [Bro-Dev] Bro DCE-RPC Fix for AlterContext and AlterContextResponse Parsers

2018-02-08 Thread Seth Hall
Cool, thanks Mark! .Seth On 8 Feb 2018, at 7:16, Fernandez, Mark I wrote: > Hi Seth, > > Yes, I have a pcap containing the ALTER_CONTEXT req/resp packets. I > will start working on the bug fix and submit to BIT, with pcap and > test script, hopefully soon. > > Cheers, > Mark > >

Re: [Bro-Dev] 'async' update and proposal

2018-02-08 Thread Johanna Amann
I just wanted to quickly chime in here to say that I generally like the idea of having these contexts. I have no idea how complex it would be to implement something like this, but that seems like it might be a relatively clean solution to our problem :) Johanna On Tue, Jan 30, 2018 at 07:38:42AM

Re: [Bro-Dev] Bro DCE-RPC Fix for AlterContext and AlterContextResponse Parsers

2018-02-08 Thread Fernandez, Mark I
Hi Seth, Yes, I have a pcap containing the ALTER_CONTEXT req/resp packets. I will start working on the bug fix and submit to BIT, with pcap and test script, hopefully soon. Cheers, Mark -Original Message- From: Seth Hall [mailto:s...@corelight.com] Sent: Saturday, February 3, 2018