[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bro
Subject:    [Bro] Bro v241 locked with pcap file ?
From:       rmkml <rmkml () ligfy ! org>
Date:       2016-03-28 19:05:36
Message-ID: alpine.DEB.2.10.1603282059540.4156 () vostro
[Download RAW message or body]

Hi,

I have replayed many pcap files on Bro v2.4.1,

but discovered one pcap "lock" bro process (bro never quit).

Simply replay: bro241 -r bro241lock.pcap
  <no error, bro never quit>

Added -C or -b or 'export BRO_DNS_FAKE=1' have same pb.

Please find a joigned a pcap file link:
  http://etplc.org/bro241lock.pcap.gz
(This partial file sended to bro list around 2009 not by me...)

Open ticket BIT-1562 on Bro Tracker.

Tested on Ubuntu v14.04.4 LTS.

Regards
@Rmkml
_______________________________________________
Bro mailing list
bro@bro-ids.org
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
[prev in list] [next in list] [prev in thread] [next in thread]