[Bro-Dev] [JIRA] (BIT-1126) Logs disappearing after bro termination

Aashish Sharma created BIT-1126: --- Summary: Logs disappearing after bro termination Key: BIT-1126 URL: https://bro-tracker.atlassian.net/browse/BIT-1126 Project: Bro Issue Tracker Issue Type: Pr

[Bro-Dev] [JIRA] (BIT-1140) Bloomfilter hashing problem

[ https://bro-tracker.atlassian.net/browse/BIT-1140?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Aashish Sharma updated BIT-1140: Attachment: bloom-test2.bro bloom-test-short.bro Test files to reproduce the probl

[Bro-Dev] [JIRA] (BIT-1140) Bloomfilter hashing problem

[ https://bro-tracker.atlassian.net/browse/BIT-1140?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16010#comment-16010 ] Aashish Sharma commented on BIT-1140: - Matthias, I have created two simple test files. Bo

[Bro-Dev] [JIRA] (BIT-1180) Input framework subsiquient REREAD fails after file update

Aashish Sharma created BIT-1180: --- Summary: Input framework subsiquient REREAD fails after file update Key: BIT-1180 URL: https://bro-tracker.atlassian.net/browse/BIT-1180 Project: Bro Issue Tracker

[Bro-Dev] [JIRA] (BIT-1181) Input-framework errors should be fatal (or Notice_Alarm) instead of silent reporter::error failures

Aashish Sharma created BIT-1181: --- Summary: Input-framework errors should be fatal (or Notice_Alarm) instead of silent reporter::error failures Key: BIT-1181 URL: https://bro-tracker.atlassian.net/browse/BIT-1181

[Bro-Dev] [JIRA] (BIT-1182) Input-framework thread spwan

Aashish Sharma created BIT-1182: --- Summary: Input-framework thread spwan Key: BIT-1182 URL: https://bro-tracker.atlassian.net/browse/BIT-1182 Project: Bro Issue Tracker Issue Type: Problem

[Bro-Dev] [JIRA] (BIT-1140) Bloomfilter hashing problem

[ https://bro-tracker.atlassian.net/browse/BIT-1140?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16801#comment-16801 ] Aashish Sharma commented on BIT-1140: - Thanks for the fix Matthias. I am testing your topic

[Bro-Dev] [JIRA] (BIT-1204) broctl query|print timesout for really large tables

Aashish Sharma created BIT-1204: --- Summary: broctl query|print timesout for really large tables Key: BIT-1204 URL: https://bro-tracker.atlassian.net/browse/BIT-1204 Project: Bro Issue Tracker Is

[Bro-Dev] [JIRA] (BIT-1204) broctl query|print timesout for really large tables

[ https://bro-tracker.atlassian.net/browse/BIT-1204?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Aashish Sharma updated BIT-1204: Resolution: Fixed Status: Closed (was: Open) setting CommTimeout = 300 ( or higher number

[Bro-Dev] [JIRA] (BIT-1204) broctl query|print timesout for really large tables

[ https://bro-tracker.atlassian.net/browse/BIT-1204?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16823#comment-16823 ] Aashish Sharma commented on BIT-1204: - Yes ! increasing CommTimeout works well. ( Needles

[Bro-Dev] [JIRA] (BIT-1140) Bloomfilter hashing problem

[ https://bro-tracker.atlassian.net/browse/BIT-1140?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16825#comment-16825 ] Aashish Sharma commented on BIT-1140: - SO I have been running the code for last 5 days on D

[Bro-Dev] [JIRA] (BIT-1286) Add policy script for Windows version detection via CryptoAPI HTTP Traffic

[ https://bro-tracker.atlassian.net/browse/BIT-1286?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18703#comment-18703 ] Aashish Sharma commented on BIT-1286: - This is a very neat policy for sure!! -- Aashish

[Bro-Dev] [JIRA] (BIT-1306) bro process would get stuck/freeze with myricom drivers

Aashish Sharma created BIT-1306: --- Summary: bro process would get stuck/freeze with myricom drivers Key: BIT-1306 URL: https://bro-tracker.atlassian.net/browse/BIT-1306 Project: Bro Issue Tracker

[Bro-Dev] [JIRA] (BIT-1306) bro process would get stuck/freeze with myricom drivers

[ https://bro-tracker.atlassian.net/browse/BIT-1306?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=19900#comment-19900 ] Aashish Sharma commented on BIT-1306: - Yes, We spent good time with myricom on this issue.

[Bro-Dev] [JIRA] (BIT-1182) Input-framework thread spwan

[ https://bro-tracker.atlassian.net/browse/BIT-1182?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=19901#comment-19901 ] Aashish Sharma commented on BIT-1182: - (Mostly FYI) I encountered this issue again, while

[Bro-Dev] [JIRA] (BIT-1182) Input-framework thread spwan

[ https://bro-tracker.atlassian.net/browse/BIT-1182?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=19908#comment-19908 ] Aashish Sharma commented on BIT-1182: - ah! that makes sense now. You are correct. I was ina

[Bro-Dev] [JIRA] (BIT-1182) Input-framework thread spwan

[ https://bro-tracker.atlassian.net/browse/BIT-1182?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Aashish Sharma updated BIT-1182: Resolution: Fixed Status: Closed (was: Open) I tested out 30K+ adds/deletes with input fra

[Bro-Dev] [JIRA] (BIT-1335) Extract all files policy script

[ https://bro-tracker.atlassian.net/browse/BIT-1335?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=19942#comment-19942 ] Aashish Sharma commented on BIT-1335: - I prefer keeping protocol + fid - Easy to sort extr

[Bro-Dev] [JIRA] (BIT-1180) Input framework subsiquient REREAD fails after file update

[ https://bro-tracker.atlassian.net/browse/BIT-1180?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=19960#comment-19960 ] Aashish Sharma commented on BIT-1180: - > But generally, I think users of the input framewor

[Bro-Dev] [JIRA] (BIT-1326) Broctl installation requires sqlite but does not check for its presence

[ https://bro-tracker.atlassian.net/browse/BIT-1326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20022#comment-20022 ] Aashish Sharma commented on BIT-1326: - I am trying to test some stuff with the current mast

[Bro-Dev] [JIRA] (BIT-1326) Broctl installation requires sqlite but does not check for its presence

[ https://bro-tracker.atlassian.net/browse/BIT-1326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20024#comment-20024 ] Aashish Sharma commented on BIT-1326: - installing py27-sqlite3 does fix the issue on 10.1-R

[Bro-Dev] [JIRA] (BIT-1370) SIP Analyzer

[ https://bro-tracker.atlassian.net/browse/BIT-1370?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20222#comment-20222 ] Aashish Sharma commented on BIT-1370: - I've been running vlad's branch (2443d319112fd345878

[Bro-Dev] [JIRA] (BIT-1306) bro process would get stuck/freeze with myricom drivers

[ https://bro-tracker.atlassian.net/browse/BIT-1306?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Aashish Sharma updated BIT-1306: Yes, So sorry, I couldn't get to it soon enough. Yes, Patch fixes the problem. Aashish -- Aashish

[Bro-Dev] [JIRA] (BIT-1396) Logs disappearing on broctl restart

Aashish Sharma created BIT-1396: --- Summary: Logs disappearing on broctl restart Key: BIT-1396 URL: https://bro-tracker.atlassian.net/browse/BIT-1396 Project: Bro Issue Tracker Issue Type: Proble

[Bro-Dev] [JIRA] (BIT-1396) Logs disappearing on broctl restart

[ https://bro-tracker.atlassian.net/browse/BIT-1396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20702#comment-20702 ] Aashish Sharma commented on BIT-1396: - Example: -rw-r--r-- 1 bro bro81M May 13 13:33

[Bro-Dev] [JIRA] (BIT-1396) Logs disappearing on broctl restart

[ https://bro-tracker.atlassian.net/browse/BIT-1396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20704#comment-20704 ] Aashish Sharma commented on BIT-1396: - Ah! Yes, I see logs in spool/tmp/post-terminate-

[Bro-Dev] [JIRA] (BIT-1396) Logs disappearing on broctl restart

[ https://bro-tracker.atlassian.net/browse/BIT-1396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20706#comment-20706 ] Aashish Sharma commented on BIT-1396: - Yes, nothing in stderr.log - likely got over-written

[Bro-Dev] [JIRA] (BIT-1396) Logs disappearing on broctl restart

[ https://bro-tracker.atlassian.net/browse/BIT-1396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20707#comment-20707 ] Aashish Sharma commented on BIT-1396: - Um! Well the stderr.log in spool/tmp/port-terminate

[Bro-Dev] [JIRA] (BIT-1396) Logs disappearing on broctl restart

[ https://bro-tracker.atlassian.net/browse/BIT-1396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20706#comment-20706 ] Aashish Sharma edited comment on BIT-1396 at 5/14/15 6:19 PM: -- Yes

[Bro-Dev] [JIRA] (BIT-1396) Logs disappearing on broctl restart

[ https://bro-tracker.atlassian.net/browse/BIT-1396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20715#comment-20715 ] Aashish Sharma commented on BIT-1396: - I found the 'missing' logs in spool/tmp/ dir. Howe

[Bro-Dev] [JIRA] (BIT-1396) Logs disappearing on broctl restart

[ https://bro-tracker.atlassian.net/browse/BIT-1396?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Aashish Sharma updated BIT-1396: Status: Reopened (was: Closed) Resolution: (was: Cannot Reproduce) > Logs disappearing

[Bro-Dev] [JIRA] (BIT-1396) Logs disappearing on broctl restart

[ https://bro-tracker.atlassian.net/browse/BIT-1396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20918#comment-20918 ] Aashish Sharma commented on BIT-1396: - Issue Remains. I am not sure what specific crashes

[Bro-Dev] [JIRA] (BIT-1472) Bif for a new function to calculates haversine distance between two geoip locations

Aashish Sharma created BIT-1472: --- Summary: Bif for a new function to calculates haversine distance between two geoip locations Key: BIT-1472 URL: https://bro-tracker.atlassian.net/browse/BIT-1472 Projec

[Bro-Dev] [JIRA] (BIT-1396) Logs disappearing on broctl restart

[ https://bro-tracker.atlassian.net/browse/BIT-1396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=21954#comment-21954 ] Aashish Sharma commented on BIT-1396: - Please close it! If I encounter this again, I will

[Bro-Dev] [JIRA] (BIT-835) Porting Drop and Catch-n-release to 2.0

[ https://bro-tracker.atlassian.net/browse/BIT-835?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=21955#comment-21955 ] Aashish Sharma commented on BIT-835: I'd take this one! On Fri, Sep 04, 2015 at 07:52:00A

[Bro-Dev] [JIRA] (BIT-1472) Bif for a new function to calculates haversine distance between two geoip locations

[ https://bro-tracker.atlassian.net/browse/BIT-1472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=25205#comment-25205 ] Aashish Sharma commented on BIT-1472: - Until you are set to update libGeoIP2 API, could you