[Bro-Dev] [JIRA] (BIT-1142) SNMP Analysis

2014-03-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1142?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16003#comment-16003 ] Robin Sommer commented on BIT-1142: --- I'm fine merging this but I would then still like

[Bro-Dev] [JIRA] (BIT-1129) RADIUS Protocol Analyzer

2014-03-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1129?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16004#comment-16004 ] Robin Sommer commented on BIT-1129: --- Vlad, any trace? What about the two questions above

[Bro-Dev] [JIRA] (BIT-1170) merge topic/bernhard/sumstats-read-expire

2014-03-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1170?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1170: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) merge topic/bernhard

[Bro-Dev] [JIRA] (BIT-1161) topic/jsiwek/faster-val-clone

2014-03-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1161?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1161: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/jsiwek/faster

[Bro-Dev] [JIRA] (BIT-1173) Upload pysubnettree to pypi

2014-03-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1173?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1173: -- Resolution: Invalid Status: Closed (was: Open) Upload pysubnettree to pypi

[Bro-Dev] [JIRA] (BIT-1168) Add Java version to software framework

2014-03-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1168?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1168: - Assignee: Seth Hall Add Java version to software framework

[Bro-Dev] [JIRA] (BIT-1173) Upload pysubnettree to pypi

2014-03-31 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1173: - Summary: Upload pysubnettree to pypi Key: BIT-1173 URL: https://bro-tracker.atlassian.net/browse/BIT-1173 Project: Bro Issue Tracker Issue Type: Task

[Bro-Dev] [JIRA] (BIT-1159) count/port comparisons silently fail when part of a record

2014-03-20 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1159?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15813#comment-15813 ] Robin Sommer commented on BIT-1159: --- Yeah, I'm afraid it is ... That has indeed been

Re: [Bro-Dev] [JIRA] (BIT-1159) count/port comparisons silently fail when part of a record

2014-03-20 Thread Robin Sommer
Is the original code actually supposed to work? Yeah, I'm afraid it is ... That has indeed been a legitimate shortcut since Bro's early versions. However, I wouldn't veto removing it; it does indeed make some code parts quite a bit more complex, and I don't think it's a crucial feature to have

[Bro-Dev] [JIRA] (BIT-1158) topic/dnthayer/broctl-fixes

2014-03-17 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1158?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1158: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/dnthayer/broctl

[Bro-Dev] [JIRA] (BIT-1134) DNS_Mgr::LookupAddr does not respect DNS_FAKE

2014-03-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15735#comment-15735 ] Robin Sommer commented on BIT-1134: --- If just order changes, or say new lookups get introduced

[Bro-Dev] [JIRA] (BIT-1149) Check Coverity PIA message

2014-03-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1149?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15740#comment-15740 ] Robin Sommer commented on BIT-1149: --- Fixed in 00755f1e40c7e Check Coverity PIA message

[Bro-Dev] [JIRA] (BIT-953) SSL Analyzer: return the root CA used to validate a cert

2014-03-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-953?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-953: - Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) The merge is tracked

[Bro-Dev] [JIRA] (BIT-760) Lift Server Alternative Name (SAN) field to scripting layer

2014-03-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-760?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-760: - Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) The merge is tracked

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

2014-03-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15744#comment-15744 ] Robin Sommer commented on BIT-1150: --- Note, BIT-953 and BIT-760 have some additional

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

2014-03-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15748#comment-15748 ] Robin Sommer commented on BIT-1150: --- Not merged yet. X509 updates

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

2014-03-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15754#comment-15754 ] Robin Sommer commented on BIT-1150: --- Agreed. Seth, when you have reviewed the scripts

[Bro-Dev] [JIRA] (BIT-1156) DNS analyzer parses TXT records imcompletely

2014-03-13 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1156?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15727#comment-15727 ] Robin Sommer commented on BIT-1156: --- Yes, this is what I meant; and right: it should

[Bro-Dev] [JIRA] (BIT-1154) Formatters restructed in: topic/seth/json-formatter

2014-03-13 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1154?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15728#comment-15728 ] Robin Sommer commented on BIT-1154: --- Merged. The tests are a bit on the weak side though

[Bro-Dev] [JIRA] (BIT-1148) Bug in Connection::FlipRoles

2014-03-13 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1148?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1148: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Bug in Connection

[Bro-Dev] [JIRA] (BIT-1154) Formatters restructed in: topic/seth/json-formatter

2014-03-13 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1154?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15729#comment-15729 ] Robin Sommer commented on BIT-1154: --- Also, regarding renaming: agree that the Ascii formatter

[Bro-Dev] [JIRA] (BIT-1134) DNS_Mgr::LookupAddr does not respect DNS_FAKE

2014-03-13 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1134: -- Status: Open (was: Merge Request) DNS_Mgr::LookupAddr does not respect DNS_FAKE

[Bro-Dev] [JIRA] (BIT-1128) Add configure options for linking against jemalloc

2014-03-12 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1128: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Add configure options

[Bro-Dev] [JIRA] (BIT-1156) DNS analyzer parses TXT records imcompletely

2014-03-12 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1156: - Summary: DNS analyzer parses TXT records imcompletely Key: BIT-1156 URL: https://bro-tracker.atlassian.net/browse/BIT-1156 Project: Bro Issue Tracker Issue Type

[Bro-Dev] [JIRA] (BIT-1156) DNS analyzer parses TXT records imcompletely

2014-03-12 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1156?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15724#comment-15724 ] Robin Sommer commented on BIT-1156: --- ,,, or better: pass a set[string] to the event. DNS

[Bro-Dev] [JIRA] (BIT-1147) topic/seth/dns-srv-fix - Fixing some problems with DNS

2014-03-10 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1147?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1147: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/seth/dns-srv-fix

[Bro-Dev] [JIRA] (BIT-1147) topic/seth/dns-srv-fix - Fixing some problems with DNS

2014-03-10 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1147?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15718#comment-15718 ] Robin Sommer commented on BIT-1147: --- Yeah, I saw that, but it's uglier to hardcode a port

[Bro-Dev] [JIRA] (BIT-1153) DNS inconsistency

2014-03-10 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1153: - Summary: DNS inconsistency Key: BIT-1153 URL: https://bro-tracker.atlassian.net/browse/BIT-1153 Project: Bro Issue Tracker Issue Type: Problem

[Bro-Dev] [JIRA] (BIT-1153) DNS inconsistency

2014-03-10 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1153?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1153: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) DNS inconsistency

[Bro-Dev] [JIRA] (BIT-1147) topic/seth/dns-srv-fix - Fixing some problems with DNS

2014-03-09 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1147?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15715#comment-15715 ] Robin Sommer commented on BIT-1147: --- Let me ask the expected question: any better way

[Bro-Dev] [JIRA] (BIT-1128) Add configure options for linking against jemalloc

2014-03-07 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1128: - Assignee: Jon Siwek Add configure options for linking against jemalloc

[Bro-Dev] [JIRA] (BIT-1134) DNS_Mgr::LookupAddr does not respect DNS_FAKE

2014-03-07 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1134: - Assignee: Jon Siwek DNS_Mgr::LookupAddr does not respect DNS_FAKE

[Bro-Dev] [JIRA] (BIT-1138) UDP scan detection generates a large number of triggers

2014-03-07 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1138?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1138: -- Resolution: Invalid Status: Closed (was: Open) Not in distribution yet. UDP scan detection

[Bro-Dev] [JIRA] (BIT-1137) Investigate sumstats / scan detector performance

2014-03-07 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1137?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1137: - Assignee: Seth Hall (was: Gilbert Clark) Investigate sumstats / scan detector performance

[Bro-Dev] [JIRA] (BIT-1139) MHR lookups can cause significant CPU overhead in tests

2014-03-07 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1139?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1139: - Assignee: Jon Siwek (was: Gilbert Clark) MHR lookups can cause significant CPU overhead

[Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

2014-03-07 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1143?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1143: -- Reporter: Seth Hall (was: Jon Siwek) Investigate replacing libmagic w/ signatures for file

[Bro-Dev] [JIRA] (BIT-348) Reassembler integer overflow issues. Data not delivered after 2GB

2014-03-07 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-348?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-348: Assignee: Bernhard Amann Reassembler integer overflow issues. Data not delivered after 2GB

[Bro-Dev] [JIRA] (BIT-1151) JSON output

2014-03-07 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1151: - Summary: JSON output Key: BIT-1151 URL: https://bro-tracker.atlassian.net/browse/BIT-1151 Project: Bro Issue Tracker Issue Type: Problem Components: Bro

[Bro-Dev] [JIRA] (BIT-1152) BroControl version check

2014-03-07 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1152: - Summary: BroControl version check Key: BIT-1152 URL: https://bro-tracker.atlassian.net/browse/BIT-1152 Project: Bro Issue Tracker Issue Type: Problem

[Bro-Dev] [JIRA] (BIT-1149) Check Coverity PIA message

2014-03-07 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1149: - Summary: Check Coverity PIA message Key: BIT-1149 URL: https://bro-tracker.atlassian.net/browse/BIT-1149 Project: Bro Issue Tracker Issue Type: Problem

[Bro-Dev] [JIRA] (BIT-1146) Merge topic/bernhard/ssl-failure

2014-03-05 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1146: - Assignee: Seth Hall Merge topic/bernhard/ssl-failure

[Bro-Dev] [JIRA] (BIT-1132) topic/seth/http-connect

2014-03-03 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1132: -- Status: Merge Request (was: Open) topic/seth/http-connect

[Bro-Dev] [JIRA] (BIT-1132) topic/seth/http-connect

2014-03-03 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1132: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/seth/http

[Bro-Dev] [JIRA] (BIT-1144) topk_get_top returned data type

2014-03-03 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1144?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1144: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topk_get_top returned

[Bro-Dev] [JIRA] (BIT-1129) RADIUS Protocol Analyzer

2014-02-28 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1129?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1129: - Assignee: Vlad Grigorescu RADIUS Protocol Analyzer

[Bro-Dev] [JIRA] (BIT-1129) RADIUS Protocol Analyzer

2014-02-28 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1129?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1129: -- Status: Open (was: Merge Request) RADIUS Protocol Analyzer

[Bro-Dev] [JIRA] (BIT-700) PacketSorter

2014-02-28 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-700?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15604#comment-15604 ] Robin Sommer commented on BIT-700: -- What's this? :) Delete? {code} + case DLT_IEEE802_11

[Bro-Dev] [JIRA] (BIT-1117) Broctl base communication port should be configurable

2014-02-28 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1117?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1117: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Broctl base

[Bro-Dev] [JIRA] (BIT-700) PacketSorter

2014-02-28 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-700?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-700: - Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) PacketSorter

[Bro-Dev] [JIRA] (BIT-1136) Apply lib magic fix

2014-02-21 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1136?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1136: -- Status: Closed (was: Merge Request) Apply lib magic fix --- Key

[Bro-Dev] [JIRA] (BIT-1138) UDP scan detection generates a large number of triggers

2014-02-21 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1138?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15581#comment-15581 ] Robin Sommer commented on BIT-1138: --- The CPU spikes worry me quite a bit. I can't quite tell

[Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

2014-02-21 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15583#comment-15583 ] Robin Sommer commented on BIT-1143: --- Wedging it in is fine for now. Eventually we might

[Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

2014-02-20 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15569#comment-15569 ] Robin Sommer commented on BIT-1143: --- Just checked: the magic database covers 273 different

Re: [Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

2014-02-20 Thread Robin Sommer
On Thu, Feb 20, 2014 at 16:59 -0600, you wrote: In that case, what's gained from Bro having it's own file magic signatures instead of just using libmagic by itself? I was thinking better control over the matching, but I guess there's not really that much to gain in addition. If Bro did

[Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

2014-02-20 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15573#comment-15573 ] Robin Sommer commented on BIT-1143: --- I was thinking better control over the matching

[Bro-Dev] [JIRA] (BIT-1139) MHR lookups can cause significant CPU overhead in tests

2014-02-18 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1139: - Summary: MHR lookups can cause significant CPU overhead in tests Key: BIT-1139 URL: https://bro-tracker.atlassian.net/browse/BIT-1139 Project: Bro Issue Tracker

[Bro-Dev] [JIRA] (BIT-1140) Bloomfilter hashing problem

2014-02-18 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1140: - Summary: Bloomfilter hashing problem Key: BIT-1140 URL: https://bro-tracker.atlassian.net/browse/BIT-1140 Project: Bro Issue Tracker Issue Type: Problem

[Bro-Dev] [JIRA] (BIT-1132) topic/seth/http-connect

2014-02-18 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1132?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15559#comment-15559 ] Robin Sommer commented on BIT-1132: --- It's not working yet, I'll take a look. topic/seth

[Bro-Dev] [JIRA] (BIT-1129) RADIUS Protocol Analyzer

2014-02-18 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1129?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1129: -- Fix Version/s: 2.3 RADIUS Protocol Analyzer Key: BIT

[Bro-Dev] [JIRA] (BIT-1141) Investigate further improvements to file analysis performance

2014-02-18 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1141: - Summary: Investigate further improvements to file analysis performance Key: BIT-1141 URL: https://bro-tracker.atlassian.net/browse/BIT-1141 Project: Bro Issue Tracker

[Bro-Dev] [JIRA] (BIT-1132) topic/seth/http-connect

2014-02-18 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1132: -- Fix Version/s: 2.3 topic/seth/http-connect --- Key: BIT-1132

[Bro-Dev] [JIRA] (BIT-1132) topic/seth/http-connect

2014-02-18 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1132: -- Status: Open (was: Merge Request) topic/seth/http-connect

[Bro-Dev] [JIRA] (BIT-1135) BRO_DNS_FAKE not respected everywhere

2014-02-18 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1135?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1135: -- Resolution: Duplicate Status: Closed (was: Open) BRO_DNS_FAKE not respected everywhere

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15550#comment-15550 ] Robin Sommer commented on BIT-1133: --- -O0. I'm using instructions as a proxy for work; so

Re: [Bro-Dev] [JIRA] (BIT-1134) DNS_Mgr::LookupAddr does not respect DNS_FAKE

2014-02-14 Thread Robin Sommer
On Thu, Feb 13, 2014 at 20:19 -0600, you wrote: Acually, it might be more that BRO_DNS_FAKE just isn't working at all. BRO_DNS_FAKE was historically for controlling how/if DNS constantns in scripts get resolved (i.e., set[add] = { www.google.com }). The lookup_* functions came later and might

[Bro-Dev] [JIRA] (BIT-1134) DNS_Mgr::LookupAddr does not respect DNS_FAKE

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15551#comment-15551 ] Robin Sommer commented on BIT-1134: --- BRO_DNS_FAKE was historically for controlling how

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15552#comment-15552 ] Robin Sommer commented on BIT-1133: --- So with optimizations enabled, I compared user time

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1133: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/jsiwek/dns-perf

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=1#comment-1 ] Robin Sommer commented on BIT-1133: --- I wasn't using local.bro. Rerunning with your command

[Bro-Dev] [JIRA] (BIT-1130) Fix some misidentification of SOCKS traffic

2014-02-14 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1130?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1130: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Fix some

Re: [Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-13 Thread Robin Sommer
never mind my 2nd point, I didn't look right. Removed from the ticket. ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-13 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15546#comment-15546 ] Robin Sommer edited comment on BIT-1133 at 2/13/14 7:26 PM: Merged

[Bro-Dev] [JIRA] (BIT-1133) topic/jsiwek/dns-perf

2014-02-13 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15546#comment-15546 ] Robin Sommer commented on BIT-1133: --- Merged, with the expected result: time goes down. Two

[Bro-Dev] [JIRA] (BIT-161) In standalone mode, broctl attempts to connect to wrong port.

2014-02-12 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15541#comment-15541 ] Robin Sommer commented on BIT-161: -- Using different ports allows to use them all

[Bro-Dev] [JIRA] (BIT-1128) Add configure options for linking against jemalloc

2014-02-11 Thread Robin Sommer (JIRA)
Robin Sommer created BIT-1128: - Summary: Add configure options for linking against jemalloc Key: BIT-1128 URL: https://bro-tracker.atlassian.net/browse/BIT-1128 Project: Bro Issue Tracker Issue

[Bro-Dev] [JIRA] (BIT-123) expire-logs doesn't expire stats/*

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-123?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15523#comment-15523 ] Robin Sommer commented on BIT-123: -- It's not very important but something we should probably

[Bro-Dev] [JIRA] (BIT-123) expire-logs doesn't expire stats/*

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-123?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-123: Assignee: Daniel Thayer (was: Robin Sommer) expire-logs doesn't expire stats

[Bro-Dev] [JIRA] (BIT-130) Potential memory leak in serialization cache

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-130?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-130: - Resolution: Cannot Reproduce Status: Closed (was: Open) Closing because unclear how

[Bro-Dev] [JIRA] (BIT-131) Potential leak in remote serializer's logging

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-131?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-131: - Resolution: Cannot Reproduce Status: Closed (was: Open) Closing because unclear how

[Bro-Dev] [JIRA] (BIT-174) policy/xquery directory and files did not make it to trunk from Robin's branch

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-174?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-174: - Resolution: Invalid Status: Closed (was: Open) no longer applies policy/xquery directory

[Bro-Dev] [JIRA] (BIT-178) BroControl's check process should check for ability to set ulimit -d

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-178?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-178: Assignee: Daniel Thayer (was: Robin Sommer) BroControl's check process should check for ability

[Bro-Dev] [JIRA] (BIT-132) Potential leak in remote serializer's AddPeer

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-132: - Resolution: Cannot Reproduce Status: Closed (was: Open) No clear if it still exists and how

[Bro-Dev] [JIRA] (BIT-721) Broccoli python doesn't support all possible data types

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-721?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-721: - Resolution: Won't Fix Status: Closed (was: Open) There's been some work on this but I don't see

[Bro-Dev] [JIRA] (BIT-79) DNS analyzer does not generate events on most NXDOMAIN

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-79?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-79: --- Assignee: (was: Robin Sommer) DNS analyzer does not generate events on most NXDOMAIN

[Bro-Dev] [JIRA] (BIT-12) Capture from multiple interfaces

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-12?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-12: --- Assignee: (was: Robin Sommer) Is this something that's still desired? We should either bump

[Bro-Dev] [JIRA] (BIT-287) BroControl should warn if changes aren't installed

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-287?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-287: Assignee: (was: Robin Sommer) This sounds like something the new broctld could eventually do

[Bro-Dev] [JIRA] (BIT-288) Requesting BroControl feature to force flush log files.

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-288?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-288: Assignee: (was: Robin Sommer) Requesting BroControl feature to force flush log files

[Bro-Dev] [JIRA] (BIT-1017) MPLS in VLAN not considered/stripped

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1017?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1017: -- Status: Merge Request (was: Open) MPLS in VLAN not considered/stripped

[Bro-Dev] [JIRA] (BIT-862) btest path length limitations

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-862?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15532#comment-15532 ] Robin Sommer commented on BIT-862: -- Not quite sure either but what I'll do for now is take

[Bro-Dev] [JIRA] (BIT-1017) MPLS in VLAN not considered/stripped

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1017?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1017: - Assignee: (was: Robin Sommer) MPLS in VLAN not considered/stripped

[Bro-Dev] [JIRA] (BIT-161) In standalone mode, broctl attempts to connect to wrong port.

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-161?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-161: Assignee: Daniel Thayer (was: Robin Sommer) I'm not quite sure how to test for this, I guess we'd

[Bro-Dev] [JIRA] (BIT-67) Grammar ambiguity with local for introducing when variables

2014-02-11 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-67?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-67: --- Assignee: (was: Robin Sommer) Grammar ambiguity with local for introducing when variables

Re: [Bro-Dev] Test timing measurements (Re: [Bro-Commits] [git/btest] topic/robin/timing: Adding a timing mode that records test execution times per host. (808fd76))

2014-02-07 Thread Robin Sommer
of this, maybe btest should also record a short descripting of the platform along with that. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin ___ bro-dev mailing list bro-dev

[Bro-Dev] [JIRA] (BIT-1126) Logs disappearing after bro termination

2014-02-06 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1126?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1126: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Logs disappearing

[Bro-Dev] [JIRA] (BIT-1125) topic/jsiwek/http-file-id-caching

2014-01-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15316#comment-15316 ] Robin Sommer commented on BIT-1125: --- {{I think the cases where there is really only one way

[Bro-Dev] [JIRA] (BIT-1125) topic/jsiwek/http-file-id-caching

2014-01-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1125: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) topic/jsiwek/http-file

[Bro-Dev] Test timing measurements (Re: [Bro-Commits] [git/btest] topic/robin/timing: Adding a timing mode that records test execution times per host. (808fd76))

2014-01-31 Thread Robin Sommer
is if it's worth commiting data that's very specific to a single user/machine to the repos? Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin ___ bro-dev mailing list bro-dev

[Bro-Dev] [JIRA] (BIT-1124) process command misplaces custom scripts

2014-01-31 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1124?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1124: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) process command

[Bro-Dev] Dot release?

2014-01-30 Thread Robin Sommer
also be the time to finalize any other minor fixes that people might want to see in 2.2.1. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * ro...@icir.org ICSI/LBNL* Fax +1 (510) 666-2956 * www.icir.org/robin ___ bro-dev mailing list bro-dev

[Bro-Dev] [JIRA] (BIT-1119) topic/jsiwek/tcp-improvements

2014-01-30 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1119?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1119: -- Status: Open (was: Merge Request) topic/jsiwek/tcp-improvements

<    4   5   6   7   8   9   10   11   >