[Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

2014-02-21 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15583#comment-15583 ] Robin Sommer commented on BIT-1143: --- Wedging it in is fine for now. Eventually we might

[Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

2014-02-20 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15569#comment-15569 ] Robin Sommer commented on BIT-1143: --- Just checked: the magic database covers 273 different

Re: [Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

2014-02-20 Thread Robin Sommer
On Thu, Feb 20, 2014 at 16:59 -0600, you wrote: In that case, what's gained from Bro having it's own file magic signatures instead of just using libmagic by itself? I was thinking better control over the matching, but I guess there's not really that much to gain in addition. If Bro did

[Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

2014-02-20 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15573#comment-15573 ] Robin Sommer commented on BIT-1143: --- I was thinking better control over the matching

[Bro-Dev] [JIRA] (BIT-1139) MHR lookups can cause significant CPU overhead in tests

2014-02-18 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1139: - Summary: MHR lookups can cause significant CPU overhead in tests Key: BIT-1139 URL: https://bro-tracker.atlassian.net/browse/BIT-1139 Project: Bro Issue Tracker

[Bro-Dev] [JIRA] (BIT-1140) Bloomfilter hashing problem

2014-02-18 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1140: - Summary: Bloomfilter hashing problem Key: BIT-1140 URL: https://bro-tracker.atlassian.net/browse/BIT-1140 Project: Bro Issue Tracker Issue Type: Problem

[Bro-Dev] [JIRA] (BIT-1132) topic/seth/http-connect

2014-02-18 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1132?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15559#comment-15559 ] Robin Sommer commented on BIT-1132: --- It's not working yet, I'll take a look. topic/seth

[Bro-Dev] [JIRA] (BIT-1129) RADIUS Protocol Analyzer

2014-02-18 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1129?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1129: -- Fix Version/s: 2.3 RADIUS Protocol Analyzer Key: BIT

[Bro-Dev] [JIRA] (BIT-1141) Investigate further improvements to file analysis performance

2014-02-18 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1141: - Summary: Investigate further improvements to file analysis performance Key: BIT-1141 URL: https://bro-tracker.atlassian.net/browse/BIT-1141 Project: Bro Issue Tracker

[Bro-Dev] [JIRA] (BIT-1132) topic/seth/http-connect

2014-02-18 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1132: -- Fix Version/s: 2.3 topic/seth/http-connect --- Key: BIT-1132

[Bro-Dev] [JIRA] (BIT-1132) topic/seth/http-connect

2014-02-18 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1132: -- Status: Open (was: Merge Request) topic/seth/http-connect

[Bro-Dev] [JIRA] (BIT-1135) BRO_DNS_FAKE not respected everywhere

2014-02-18 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1135?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1135: -- Resolution: Duplicate Status: Closed (was: Open) BRO_DNS_FAKE not respected everywhere

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15550#comment-15550 ] Robin Sommer commented on BIT-1133: --- -O0. I'm using instructions as a proxy for work; so

Re: [Bro-Dev] [JIRA] (BIT-1134) DNS_Mgr::LookupAddr does not respect DNS_FAKE

2014-02-14 Thread Robin Sommer
On Thu, Feb 13, 2014 at 20:19 -0600, you wrote: Acually, it might be more that BRO_DNS_FAKE just isn't working at all. BRO_DNS_FAKE was historically for controlling how/if DNS constantns in scripts get resolved (i.e., set[add] = { www.google.com }). The lookup_* functions came later and might

[Bro-Dev] [JIRA] (BIT-1134) DNS_Mgr::LookupAddr does not respect DNS_FAKE

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15551#comment-15551 ] Robin Sommer commented on BIT-1134: --- BRO_DNS_FAKE was historically for controlling how

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15552#comment-15552 ] Robin Sommer commented on BIT-1133: --- So with optimizations enabled, I compared user time

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1133: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/jsiwek/dns-perf

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=1#comment-1 ] Robin Sommer commented on BIT-1133: --- I wasn't using local.bro. Rerunning with your command

[Bro-Dev] [JIRA] (BIT-1130) Fix some misidentification of SOCKS traffic

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1130?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1130: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Fix some

Re: [Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-13 Thread Robin Sommer
never mind my 2nd point, I didn't look right. Removed from the ticket. ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-13 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15546#comment-15546 ] Robin Sommer edited comment on BIT-1133 at 2/13/14 7:26 PM: Merged

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-13 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15546#comment-15546 ] Robin Sommer commented on BIT-1133: --- Merged, with the expected result: time goes down. Two

[Bro-Dev] [JIRA] (BIT-161) In standalone mode, broctl attempts to connect to wrong port.

2014-02-12 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15541#comment-15541 ] Robin Sommer commented on BIT-161: -- Using different ports allows to use them all

[Bro-Dev] [JIRA] (BIT-1128) Add configure options for linking against jemalloc

2014-02-11 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1128: - Summary: Add configure options for linking against jemalloc Key: BIT-1128 URL: https://bro-tracker.atlassian.net/browse/BIT-1128 Project: Bro Issue Tracker Issue

[Bro-Dev] [JIRA] (BIT-123) expire-logs doesn't expire stats/*

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-123?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15523#comment-15523 ] Robin Sommer commented on BIT-123: -- It's not very important but something we should probably

[Bro-Dev] [JIRA] (BIT-123) expire-logs doesn't expire stats/*

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-123?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-123: Assignee: Daniel Thayer (was: Robin Sommer) expire-logs doesn't expire stats

[Bro-Dev] [JIRA] (BIT-130) Potential memory leak in serialization cache

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-130?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-130: - Resolution: Cannot Reproduce Status: Closed (was: Open) Closing because unclear how

[Bro-Dev] [JIRA] (BIT-131) Potential leak in remote serializer's logging

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-131?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-131: - Resolution: Cannot Reproduce Status: Closed (was: Open) Closing because unclear how

[Bro-Dev] [JIRA] (BIT-174) policy/xquery directory and files did not make it to trunk from Robin's branch

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-174?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-174: - Resolution: Invalid Status: Closed (was: Open) no longer applies policy/xquery directory

[Bro-Dev] [JIRA] (BIT-178) BroControl's check process should check for ability to set ulimit -d

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-178?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-178: Assignee: Daniel Thayer (was: Robin Sommer) BroControl's check process should check for ability

[Bro-Dev] [JIRA] (BIT-132) Potential leak in remote serializer's AddPeer

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-132: - Resolution: Cannot Reproduce Status: Closed (was: Open) No clear if it still exists and how

[Bro-Dev] [JIRA] (BIT-721) Broccoli python doesn't support all possible data types

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-721?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-721: - Resolution: Won't Fix Status: Closed (was: Open) There's been some work on this but I don't see

[Bro-Dev] [JIRA] (BIT-79) DNS analyzer does not generate events on most NXDOMAIN

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-79?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-79: --- Assignee: (was: Robin Sommer) DNS analyzer does not generate events on most NXDOMAIN

[Bro-Dev] [JIRA] (BIT-12) Capture from multiple interfaces

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-12?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-12: --- Assignee: (was: Robin Sommer) Is this something that's still desired? We should either bump

[Bro-Dev] [JIRA] (BIT-287) BroControl should warn if changes aren't installed

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-287?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-287: Assignee: (was: Robin Sommer) This sounds like something the new broctld could eventually do

[Bro-Dev] [JIRA] (BIT-288) Requesting BroControl feature to force flush log files.

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-288?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-288: Assignee: (was: Robin Sommer) Requesting BroControl feature to force flush log files

[Bro-Dev] [JIRA] (BIT-1017) MPLS in VLAN not considered/stripped

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1017?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1017: -- Status: Merge Request (was: Open) MPLS in VLAN not considered/stripped

[Bro-Dev] [JIRA] (BIT-862) btest path length limitations

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-862?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15532#comment-15532 ] Robin Sommer commented on BIT-862: -- Not quite sure either but what I'll do for now is take

[Bro-Dev] [JIRA] (BIT-1017) MPLS in VLAN not considered/stripped

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1017?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1017: - Assignee: (was: Robin Sommer) MPLS in VLAN not considered/stripped

[Bro-Dev] [JIRA] (BIT-161) In standalone mode, broctl attempts to connect to wrong port.

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-161?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-161: Assignee: Daniel Thayer (was: Robin Sommer) I'm not quite sure how to test for this, I guess we'd

[Bro-Dev] [JIRA] (BIT-67) Grammar ambiguity with local for introducing when variables

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-67?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-67: --- Assignee: (was: Robin Sommer) Grammar ambiguity with local for introducing when variables

Re: [Bro-Dev] Test timing measurements (Re: [Bro-Commits] [git/btest] topic/robin/timing: Adding a timing mode that records test execution times per host. (808fd76))

2014-02-07 Thread Robin Sommer
of this, maybe btest should also record a short descripting of the platform along with that. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin ___ bro-dev mailing list bro-dev

[Bro-Dev] [JIRA] (BIT-1126) Logs disappearing after bro termination

2014-02-06 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1126?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1126: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Logs disappearing

[Bro-Dev] [JIRA] (BIT-1125) topic/jsiwek/http-file-id-caching

2014-01-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15316#comment-15316 ] Robin Sommer commented on BIT-1125: --- {{I think the cases where there is really only one way

[Bro-Dev] [JIRA] (BIT-1125) topic/jsiwek/http-file-id-caching

2014-01-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1125: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/jsiwek/http-file

[Bro-Dev] Test timing measurements (Re: [Bro-Commits] [git/btest] topic/robin/timing: Adding a timing mode that records test execution times per host. (808fd76))

2014-01-31 Thread Robin Sommer
is if it's worth commiting data that's very specific to a single user/machine to the repos? Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin ___ bro-dev mailing list bro-dev

[Bro-Dev] [JIRA] (BIT-1124) process command misplaces custom scripts

2014-01-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1124?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1124: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) process command

[Bro-Dev] Dot release?

2014-01-30 Thread Robin Sommer
also be the time to finalize any other minor fixes that people might want to see in 2.2.1. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin ___ bro-dev mailing list bro-dev

[Bro-Dev] [JIRA] (BIT-1119) topic/jsiwek/tcp-improvements

2014-01-30 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1119?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1119: -- Status: Open (was: Merge Request) topic/jsiwek/tcp-improvements

[Bro-Dev] [JIRA] (BIT-1125) topic/jsiwek/http-file-id-caching

2014-01-30 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15310#comment-15310 ] Robin Sommer commented on BIT-1125: --- For the case that the core can compute the file id

[Bro-Dev] [JIRA] (BIT-1119) topic/jsiwek/tcp-improvements

2014-01-29 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15305#comment-15305 ] Robin Sommer commented on BIT-1119: --- {quote} have some script warn if all TCP connections

[Bro-Dev] [JIRA] (BIT-1120) Fix extend x509_extension event

2014-01-29 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1120?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1120: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Fix extend

[Bro-Dev] [JIRA] (BIT-1124) process command misplaces custom scripts

2014-01-29 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1124: - Summary: process command misplaces custom scripts Key: BIT-1124 URL: https://bro-tracker.atlassian.net/browse/BIT-1124 Project: Bro Issue Tracker Issue Type

[Bro-Dev] [JIRA] (BIT-1122) topic/jsiwek/dns-improvements

2014-01-28 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1122?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1122: - Assignee: Seth Hall topic/jsiwek/dns-improvements

[Bro-Dev] [JIRA] (BIT-1118) topic/jsiwek/review-rafael-bro-manual-changes

2014-01-22 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1118?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1118: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/jsiwek/review

[Bro-Dev] [JIRA] (BIT-867) GRE support

2014-01-20 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-867?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15300#comment-15300 ] Robin Sommer commented on BIT-867: -- {noformat} // Not considering routing presence bit since

[Bro-Dev] [JIRA] (BIT-1115) topic/jazoff/suppression

2014-01-20 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1115?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1115: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/jazoff

[Bro-Dev] [JIRA] (BIT-1116) topic/jsiwek/libmagic-integration

2014-01-20 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1116: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/jsiwek/libmagic

[Bro-Dev] [JIRA] (BIT-867) GRE support

2014-01-20 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-867?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-867: - Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) GRE support

[Bro-Dev] [JIRA] (BIT-1108) Add broctl option to set PF_RING cluster type

2014-01-13 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1108: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Add broctl option

[Bro-Dev] [JIRA] (BIT-1109) topic/dnthayer/doc-updates

2013-12-24 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1109?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1109: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/dnthayer/doc

Re: [Bro-Dev] Dynamic plugin model (Re: [Bro-Commits] [git/bro] topic/robin/dynamic-plugins-2.3: Start of a plugin writing how-to. (87a1618))

2013-12-20 Thread Robin Sommer
(like version mismatches, etc.) In terms of performance, I wouldn't be too worried actually, although it's something that needs testing. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin

Re: [Bro-Dev] Dynamic plugin model (Re: [Bro-Commits] [git/bro] topic/robin/dynamic-plugins-2.3: Start of a plugin writing how-to. (87a1618))

2013-12-19 Thread Robin Sommer
On Wed, Dec 18, 2013 at 12:20 -0500, you wrote: I just build bro, cd into the build directory, source in the bro-path-dev.sh script and run Bro. Ah, I see. It's something else than I thought: a left-over from the earlier version that isn't needed anymore. Removed. Robin -- Robin Sommer

Re: [Bro-Dev] Dynamic plugin model (Re: [Bro-Commits] [git/bro] topic/robin/dynamic-plugins-2.3: Start of a plugin writing how-to. (87a1618))

2013-12-19 Thread Robin Sommer
On Wed, Dec 18, 2013 at 21:07 -0500, you wrote: /tmp/bro/src/util.h:24:10: fatal error: 'magic.h' file not found I didn't consider Bro's CXX_FLAGS. I think I've fixed that, please try again. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510

Re: [Bro-Dev] Dynamic plugin model (Re: [Bro-Commits] [git/bro] topic/robin/dynamic-plugins-2.3: Start of a plugin writing how-to. (87a1618))

2013-12-19 Thread Robin Sommer
and dynamic plugins could be unified further. It's unclear what the right default is for shipping plugins that provide standard functionality, but it would be nice in any case if we could just flip a switch to change between static and dynamic builds for the in-tree stuff. Robin -- Robin

Re: [Bro-Dev] Dynamic plugin model (Re: [Bro-Commits] [git/bro] topic/robin/dynamic-plugins-2.3: Start of a plugin writing how-to. (87a1618))

2013-12-18 Thread Robin Sommer
On Wed, Dec 18, 2013 at 08:10 -0500, you wrote: error in ./plugins, line 1: read failed with Is a directory Doh. :) Not sure how to reproducee though. How exactly are you running it? Are you setting BRO_PLUGIN_PATH, and if so, how? Robin -- Robin Sommer * Phone +1 (510) 722-6541

[Bro-Dev] Dynamic plugin model (Re: [Bro-Commits] [git/bro] topic/robin/dynamic-plugins-2.3: Start of a plugin writing how-to. (87a1618))

2013-12-16 Thread Robin Sommer
:: + +Integrate all this with Broxygen. + + + ___ bro-commits mailing list bro-comm...@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-commits -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL

Re: [Bro-Dev] Proposed IOSource reorg

2013-12-11 Thread Robin Sommer
don't have any tests, not surprisingly). Thoughts? Robin On Wed, Dec 04, 2013 at 11:12 -0500, you wrote: On Dec 3, 2013, at 1:07 PM, Robin Sommer ro...@icir.org wrote: src/iosource/sources/flow-src/* To document our conversation from yesterday, flow-src should probably be thrown

[Bro-Dev] [JIRA] (BIT-1105) /topic/jsiwek/misc-fixes

2013-12-09 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1105?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1105: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) /topic/jsiwek/misc

[Bro-Dev] [JIRA] (BIT-1103) Memory leak in Bro Intel framework

2013-12-09 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1103: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Memory leak in Bro

[Bro-Dev] [JIRA] (BIT-1106) Merge topic/bernhard/input-error-fixes

2013-12-09 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1106?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1106: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Merge topic/bernhard

[Bro-Dev] [JIRA] (BIT-1104) Add tracking for MSIE 11

2013-12-09 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1104?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1104: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Add tracking for MSIE

[Bro-Dev] [JIRA] (BIT-1107) Documentation of BIFs that take variable number of arguments

2013-12-06 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1107?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14918#comment-14918 ] Robin Sommer commented on BIT-1107: --- The work-around of turning va_args function arguments

[Bro-Dev] [JIRA] (BIT-1101) Merge topic/bernhard/ssl_ciphers_vector

2013-12-05 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1101?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1101: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Merge topic/bernhard

[Bro-Dev] [JIRA] (BIT-1097) Unexpected string indexing behavior

2013-12-05 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1097?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1097: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Unexpected string

[Bro-Dev] [JIRA] (BIT-1100) topic/jsiwek/broccoli-vectors

2013-12-05 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1100?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1100: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/jsiwek/broccoli

Re: [Bro-Dev] Broccoli and vectors

2013-12-05 Thread Robin Sommer
searched through the Broccoli docs but could not find anything. Thanks, -- Randy ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev -- Robin Sommer * Phone +1 (510) 722-6541

Re: [Bro-Dev] [Bro-Commits] [git/broccoli] topic/jsiwek/broccoli-vectors: Add support for consuming events w/ vector args. (de39868)

2013-12-04 Thread Robin Sommer
On Tue, Dec 03, 2013 at 18:09 +, you wrote: and not fixing this could be a common pitfall for users. Ack, makes sense. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin

Re: [Bro-Dev] Proposed IOSource reorg

2013-12-04 Thread Robin Sommer
be an option, though I'm not immediately sure how well it would split. But one step at a time sounds good in any case, so I'll go ahead with that and we can later see. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin

Re: [Bro-Dev] Fwd: [REL - 10amd64-default][security/bro] Failed for bro-2.2 in build

2013-12-03 Thread Robin Sommer
Which clang version is this? I've tried it with a recent version of the clang 3.4 release branch, and that works fine for me. But based on the error message, I'm attaching a patch; does that help by any chance? Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL

[Bro-Dev] [JIRA] (BIT-1097) Unexpected string indexing behavior

2013-11-25 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1097: - Summary: Unexpected string indexing behavior Key: BIT-1097 URL: https://bro-tracker.atlassian.net/browse/BIT-1097 Project: Bro Issue Tracker Issue Type: Problem

Re: [Bro-Dev] Bare Mode

2013-11-22 Thread Robin Sommer
2.0. So it's also a way to get back to the old approach where you would add things as you need them. Bro is more difficult to use that way but it can reduce resource usage quite a bit if one really only needs a couple pieces. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org

[Bro-Dev] [JIRA] (BIT-1095) Meta ticker tracking patches for potential 2.2.1

2013-11-11 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1095: - Summary: Meta ticker tracking patches for potential 2.2.1 Key: BIT-1095 URL: https://bro-tracker.atlassian.net/browse/BIT-1095 Project: Bro Issue Tracker Issue

[Bro-Dev] [JIRA] (BIT-1095) Meta ticker tracking patches for potential 2.2.1

2013-11-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1095?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1095: -- Description: I'm creating this ticket to track commits that we would want to back port to 2.2

[Bro-Dev] [JIRA] (BIT-1095) Meta ticker tracking patches for potential 2.2.1

2013-11-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1095?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14701#comment-14701 ] Robin Sommer commented on BIT-1095: --- Add to 2.2.1 Meta ticker tracking patches

[Bro-Dev] [JIRA] (BIT-1094) Segmentation Fault in SQLite Writer

2013-11-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1094?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1094: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Segmentation Fault

[Bro-Dev] [JIRA] (BIT-1093) topic/jsiwek/thread-termination

2013-10-30 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1093?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14500#comment-14500 ] Robin Sommer commented on BIT-1093: --- I looked up when the original {{ ! Killed()}} code got

[Bro-Dev] [JIRA] (BIT-1093) topic/jsiwek/thread-termination

2013-10-30 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1093?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1093: -- Status: Reopened (was: Closed) topic/jsiwek/thread-termination

[Bro-Dev] [JIRA] (BIT-1091) Broctl config.py handling of [manager] header is brittle

2013-10-21 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1091?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1091: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Broctl config.py

[Bro-Dev] Draft API for new communication library

2013-10-17 Thread Robin Sommer
will also be used by Bro itself (i.e., we;ll no longer have two independent implementations of the same protocol to maintain). Draft is here: http://www.bro.org/development/projects/comm-ng-v2.html Feedback welcome. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI

Re: [Bro-Dev] Draft API for new communication library

2013-10-17 Thread Robin Sommer
dependency but it would make this stuff quite a bit less cumbersome. Do you know if their C version is well maintained? It looks rather old compared to the standard protobuf distribution. Does Cap'n Proto have a C API? Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL

Re: [Bro-Dev] [Bro-Commits] [git/bro] topic/dnthayer/doc-changes-for-2.2: Update FreeBSD install instructions (72129ae)

2013-10-16 Thread Robin Sommer
On Mon, Oct 14, 2013 at 15:28 -0700, you wrote: Added perl to list of packages to install (it's not installed by default). What do we require Perl for? Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin

Re: [Bro-Dev] [Bro-Commits] [git/bro] topic/dnthayer/doc-changes-for-2.2: Update FreeBSD install instructions (72129ae)

2013-10-16 Thread Robin Sommer
On Wed, Oct 16, 2013 at 11:59 -0500, you wrote: [ 67%] [Perl] Processing debug commands /bin/sh: 1: /usr/bin/perl: not found Doh! That's unfortunate that a little script like that makes us depend on Perl. Todo item for 2.3: replace with a Python or awk script. Robin -- Robin Sommer

[Bro-Dev] [JIRA] (BIT-1089) Please install sample/example broctl .cfg files

2013-10-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1089?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1089: -- Status: In Progress (was: Open) Please install sample/example broctl .cfg files

[Bro-Dev] [JIRA] (BIT-1089) Please install sample/example broctl .cfg files

2013-10-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1089?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14301#comment-14301 ] Robin Sommer commented on BIT-1089: --- This is now merged into master. Craig, does that solve

[Bro-Dev] [JIRA] (BIT-1088) pysubnettree-0.20 setup.py has wrong version

2013-10-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1088?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1088: -- Resolution: Fixed Status: Closed (was: Open) pysubnettree-0.20 setup.py has wrong version

Re: [Bro-Dev] [Bro-Commits] [git/bro] topic/dnthayer/doc-changes-for-2.2: Add README files for most Bro frameworks (60b2c5f)

2013-10-11 Thread Robin Sommer
to find though when looking at the scripts directly, so I'm a bit torn). Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin ___ bro-dev mailing list bro-dev@bro.org http

Re: [Bro-Dev] [Bro-Commits] [git/bro] topic/dnthayer/doc-changes-for-2.2: Add README files for most Bro frameworks (60b2c5f)

2013-10-11 Thread Robin Sommer
On Fri, Oct 11, 2013 at 11:53 -0400, you wrote: ultimately all of this is just leading toward creating a more formalized module style and having READMEs in the directory would probably be good form in general. Ah, good point. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro

[Bro-Dev] [JIRA] (BIT-1045) Review usage of InternalError when parsing network traffic

2013-10-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1045?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14211#comment-14211 ] Robin Sommer commented on BIT-1045: --- Going through, I see number of places where I'd argue

Re: [Bro-Dev] [JIRA] (BIT-1089) Please install sample/example broctl .cfg files

2013-10-11 Thread Robin Sommer
On Fri, Oct 11, 2013 at 13:37 -0500, you wrote: The current behavior where it only installs a .cfg if none exist is totally fine. What I'm asking for is that either by default or by turning on a cmake argument it would install sample configs. I'm still not sure I'm really getting the issue

<    4   5   6   7   8   9   10   >