[Bro-Dev] [JIRA] (BIT-1461) Bro Mgr Scripts Fail After Threat Intel Feed Add

2015-08-19 Thread Tim Jackson (JIRA)
Tim Jackson created BIT-1461: Summary: Bro Mgr Scripts Fail After Threat Intel Feed Add Key: BIT-1461 URL: https://bro-tracker.atlassian.net/browse/BIT-1461 Project: Bro Issue Tracker Issue Type:

[Bro-Dev] [JIRA] (BIT-1428) Customizable email subject lines

2015-08-19 Thread Michal Purzynski (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1428?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=21707#comment-21707 ] Michal Purzynski commented on BIT-1428: --- That would be helpful. Having NSM send emails fr

[Bro-Dev] [JIRA] (BIT-1460) DPD query too large on multicast DNS

2015-08-19 Thread Michal Purzynski (JIRA)
Michal Purzynski created BIT-1460: - Summary: DPD query too large on multicast DNS Key: BIT-1460 URL: https://bro-tracker.atlassian.net/browse/BIT-1460 Project: Bro Issue Tracker Issue Type: P

[Bro-Dev] [JIRA] (BIT-1458) Lots of binpac exceptions in SIP

2015-08-19 Thread Michal Purzynski (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1458?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=21706#comment-21706 ] Michal Purzynski commented on BIT-1458: --- More pcaps attached. > Lots of binpac exception

[Bro-Dev] [JIRA] (BIT-1458) Lots of binpac exceptions in SIP

2015-08-19 Thread Michal Purzynski (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1458?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michal Purzynski updated BIT-1458: -- Attachment: sip3.pcap sip2.pcap > Lots of binpac exceptions in SIP > --

[Bro-Dev] [JIRA] (BIT-1458) Lots of binpac exceptions in SIP

2015-08-19 Thread Michal Purzynski (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1458?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=21705#comment-21705 ] Michal Purzynski commented on BIT-1458: --- Pcap of an example scan attached > Lots of binp

[Bro-Dev] [JIRA] (BIT-1458) Lots of binpac exceptions in SIP

2015-08-19 Thread Michal Purzynski (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1458?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michal Purzynski updated BIT-1458: -- Attachment: sip-scan-detailed.pcap > Lots of binpac exceptions in SIP > ---

Re: [Bro-Dev] Pattern matching for the Bro language

2015-08-19 Thread Matthias Vallentin
> > local result = switch( x ) > > { > > case T: > > case U: > > }; > > Personally, this strike me as a tad weird, since now "result" might not > have a statically determined type, so we're back to it being "any". To avoid falling back to "any land," the addi

Re: [Bro-Dev] Pattern matching for the Bro language

2015-08-19 Thread Vern Paxson
> I want to propose introducing pattern matching for the Bro language. Per our discussion yesterday, I like this notion in general. (Seems we need a better term for it, though, as "pattern matching" is very generic - plus will confuse some people who'll think it refers to NIDS rules rather than g

[Bro-Dev] [JIRA] (BIT-1458) Lots of binpac exceptions in SIP

2015-08-19 Thread Gary Faulkner (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1458?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=21704#comment-21704 ] Gary Faulkner commented on BIT-1458: PCAP of SIP scanning activity that seems to be trigger

[Bro-Dev] [JIRA] (BIT-1458) Lots of binpac exceptions in SIP

2015-08-19 Thread Gary Faulkner (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1458?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gary Faulkner updated BIT-1458: --- Attachment: badsip-19AUG2015_anon.pcapng > Lots of binpac exceptions in SIP > ---

[Bro-Dev] Pattern matching for the Bro language

2015-08-19 Thread Matthias Vallentin
TL;DR: function f() : any; local result = ""; switch( f() ) { case addr: if ( x in 10.0.0.0/8 ) result = "got it!"; case string: result = "f() failed: " + x; } I want to propose introducing pattern matching for the Bro language. Patte

[Bro-Dev] [JIRA] (BIT-1457) [PATCH] add support for MIME type video/MP2T

2015-08-19 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1457: -- Status: Merge Request (was: Open) > [PATCH] add support for MIME type video/MP2T > ---

[Bro-Dev] [JIRA] (BIT-1458) Lots of binpac exceptions in SIP

2015-08-19 Thread Seth Hall (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1458?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=21703#comment-21703 ] Seth Hall commented on BIT-1458: The most useful thing at this point would be if someone could

[Bro-Dev] [Auto] Merge Status

2015-08-19 Thread Merge Tracker
Open Merge Requests === IDComponentReporter AssigneeUpdated For Version PrioritySummary --- --- -- -- - -- BIT-1455