[Bro-Dev] [JIRA] (BIT-1201) merge topic/bernhard/ssl-new-events

Bernhard Amann created BIT-1201: --- Summary: merge topic/bernhard/ssl-new-events Key: BIT-1201 URL: https://bro-tracker.atlassian.net/browse/BIT-1201 Project: Bro Issue Tracker Issue Type

[Bro-Dev] [JIRA] (BIT-1201) merge topic/bernhard/ssl-new-events

[ https://bro-tracker.atlassian.net/browse/BIT-1201?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1201: Status: Merge Request (was: Open) merge topic/bernhard/ssl-new-events

[Bro-Dev] [JIRA] (BIT-1201) merge topic/bernhard/ssl-new-events

[ https://bro-tracker.atlassian.net/browse/BIT-1201?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1201: Assignee: Robin Sommer merge topic/bernhard/ssl-new-events

[Bro-Dev] [JIRA] (BIT-1195) SSL: subject overflow in issuer_subject

[ https://bro-tracker.atlassian.net/browse/BIT-1195?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16702#comment-16702 ] Bernhard Amann commented on BIT-1195: - Fix is in topic/bernhard/ticket-1195 of bro

[Bro-Dev] [JIRA] (BIT-1195) SSL: subject overflow in issuer_subject

[ https://bro-tracker.atlassian.net/browse/BIT-1195?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1195: Status: Merge Request (was: Open) SSL: subject overflow in issuer_subject

[Bro-Dev] [JIRA] (BIT-1180) Input framework subsiquient REREAD fails after file update

[ https://bro-tracker.atlassian.net/browse/BIT-1180?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16704#comment-16704 ] Bernhard Amann commented on BIT-1180: - For input streams that have re-read enabled, should

[Bro-Dev] [JIRA] (BIT-1180) Input framework subsiquient REREAD fails after file update

[ https://bro-tracker.atlassian.net/browse/BIT-1180?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1180: Fix Version/s: 2.4 Input framework subsiquient REREAD fails after file update

[Bro-Dev] [JIRA] (BIT-1195) SSL: subject overflow in issuer_subject

[ https://bro-tracker.atlassian.net/browse/BIT-1195?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1195: Fix Version/s: 2.3 SSL: subject overflow in issuer_subject

[Bro-Dev] [JIRA] (BIT-1195) SSL: subject overflow in issuer_subject

[ https://bro-tracker.atlassian.net/browse/BIT-1195?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann reassigned BIT-1195: --- Assignee: Bernhard Amann SSL: subject overflow in issuer_subject

[Bro-Dev] [JIRA] (BIT-1190) Even more SSL fixes

[ https://bro-tracker.atlassian.net/browse/BIT-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1190: Status: Merge Request (was: Open) Even more SSL fixes

[Bro-Dev] [JIRA] (BIT-1190) Even more SSL fixes

[ https://bro-tracker.atlassian.net/browse/BIT-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16504#comment-16504 ] Bernhard Amann commented on BIT-1190: - Updates are in branch topic/bernhard/even-more-ssl

[Bro-Dev] [JIRA] (BIT-1190) Even more SSL fixes

[ https://bro-tracker.atlassian.net/browse/BIT-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1190: Assignee: Robin Sommer (was: Bernhard Amann) Even more SSL fixes

[Bro-Dev] [JIRA] (BIT-1190) Even more SSL fixes

[ https://bro-tracker.atlassian.net/browse/BIT-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1190: Description: There are still a few small things that I plan to fix for 2.3 * detect tls protocol

[Bro-Dev] [JIRA] (BIT-1190) Even more SSL fixes

[ https://bro-tracker.atlassian.net/browse/BIT-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann reassigned BIT-1190: --- Assignee: Bernhard Amann Even more SSL fixes --- Key

[Bro-Dev] [JIRA] (BIT-1189) merge topic/bernhard/ec-curve

Bernhard Amann created BIT-1189: --- Summary: merge topic/bernhard/ec-curve Key: BIT-1189 URL: https://bro-tracker.atlassian.net/browse/BIT-1189 Project: Bro Issue Tracker Issue Type: Improvement

[Bro-Dev] [JIRA] (BIT-1189) merge topic/bernhard/ec-curve

[ https://bro-tracker.atlassian.net/browse/BIT-1189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1189: Status: Merge Request (was: Open) merge topic/bernhard/ec-curve

[Bro-Dev] [JIRA] (BIT-1189) merge topic/bernhard/ec-curve

[ https://bro-tracker.atlassian.net/browse/BIT-1189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16229#comment-16229 ] Bernhard Amann commented on BIT-1189: - I am sorry about the long switch statements

[Bro-Dev] [JIRA] (BIT-1178) SSL/TLS analyzer does not abort early enough on non-ssl connections

[ https://bro-tracker.atlassian.net/browse/BIT-1178?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1178: Status: Merge Request (was: Open) SSL/TLS analyzer does not abort early enough on non-ssl

[Bro-Dev] [JIRA] (BIT-1178) SSL/TLS analyzer does not abort early enough on non-ssl connections

[ https://bro-tracker.atlassian.net/browse/BIT-1178?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16220#comment-16220 ] Bernhard Amann commented on BIT-1178: - topic/bernhard/ssl-analyzer contains fixes to all

[Bro-Dev] [JIRA] (BIT-1177) SumStats dynamic updates do not work in cluster mode

[ https://bro-tracker.atlassian.net/browse/BIT-1177?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16204#comment-16204 ] Bernhard Amann commented on BIT-1177: - I addressed this in the branch topic/bernhard

[Bro-Dev] [JIRA] (BIT-1177) SumStats dynamic updates do not work in cluster mode

[ https://bro-tracker.atlassian.net/browse/BIT-1177?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1177: Status: Merge Request (was: Open) SumStats dynamic updates do not work in cluster mode

[Bro-Dev] [JIRA] (BIT-1178) SSL/TLS analyzer does not abort early enough on non-ssl connections

[ https://bro-tracker.atlassian.net/browse/BIT-1178?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16108#comment-16108 ] Bernhard Amann commented on BIT-1178: - I have looked at this a bit yesterday and... the TLS

[Bro-Dev] [JIRA] (BIT-1181) Input-framework errors should be fatal (or Notice_Alarm) instead of silent reporter::error failures

[ https://bro-tracker.atlassian.net/browse/BIT-1181?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16106#comment-16106 ] Bernhard Amann commented on BIT-1181: - Ok. So - basically since, if you want to, you

[Bro-Dev] [JIRA] (BIT-1180) Input framework subsiquient REREAD fails after file update

[ https://bro-tracker.atlassian.net/browse/BIT-1180?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16102#comment-16102 ] Bernhard Amann commented on BIT-1180: - I think the way to fix this is to ignore files on re

[Bro-Dev] [JIRA] (BIT-1181) Input-framework errors should be fatal (or Notice_Alarm) instead of silent reporter::error failures

[ https://bro-tracker.atlassian.net/browse/BIT-1181?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann reassigned BIT-1181: --- Assignee: Bernhard Amann Input-framework errors should be fatal (or Notice_Alarm) instead

[Bro-Dev] [JIRA] (BIT-1176) Using an undefined function in a when statement causes a segfault

Bernhard Amann created BIT-1176: --- Summary: Using an undefined function in a when statement causes a segfault Key: BIT-1176 URL: https://bro-tracker.atlassian.net/browse/BIT-1176 Project: Bro Issue

[Bro-Dev] [JIRA] (BIT-1177) SumStats dynamic updates do not work in cluster mode

Bernhard Amann created BIT-1177: --- Summary: SumStats dynamic updates do not work in cluster mode Key: BIT-1177 URL: https://bro-tracker.atlassian.net/browse/BIT-1177 Project: Bro Issue Tracker

[Bro-Dev] [JIRA] (BIT-1178) SSL/TLS analyzer does not abort early enough on non-ssl connections

Bernhard Amann created BIT-1178: --- Summary: SSL/TLS analyzer does not abort early enough on non-ssl connections Key: BIT-1178 URL: https://bro-tracker.atlassian.net/browse/BIT-1178 Project: Bro Issue

[Bro-Dev] [JIRA] (BIT-1047) Delete old scripts before installing new ones

[ https://bro-tracker.atlassian.net/browse/BIT-1047?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16007#comment-16007 ] Bernhard Amann commented on BIT-1047: - Do we still want to add this? It would be kind

[Bro-Dev] [JIRA] (BIT-1175) topic/jsiwek/bif-loader-scripts

[ https://bro-tracker.atlassian.net/browse/BIT-1175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16011#comment-16011 ] Bernhard Amann commented on BIT-1175: - Yes, it does. Thank you. topic/jsiwek/bif-loader

[Bro-Dev] [JIRA] (BIT-1163) Logging framework text (ascii) writer writes sets as table[...]

[ https://bro-tracker.atlassian.net/browse/BIT-1163?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1163: Status: Merge Request (was: Open) Logging framework text (ascii) writer writes sets as table

[Bro-Dev] [JIRA] (BIT-1163) Logging framework text (ascii) writer writes sets as table[...]

[ https://bro-tracker.atlassian.net/browse/BIT-1163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=16012#comment-16012 ] Bernhard Amann commented on BIT-1163: - fix is in branch topic/bernhard/ticket-1163 of bro

[Bro-Dev] [JIRA] (BIT-1170) merge topic/bernhard/sumstats-read-expire

Bernhard Amann created BIT-1170: --- Summary: merge topic/bernhard/sumstats-read-expire Key: BIT-1170 URL: https://bro-tracker.atlassian.net/browse/BIT-1170 Project: Bro Issue Tracker Issue Type

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15906#comment-15906 ] Bernhard Amann commented on BIT-1150: - Seth says the script looks, good, reassigning

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1150: Assignee: Robin Sommer (was: Seth Hall) X509 updates Key: BIT

[Bro-Dev] [JIRA] (TM-16) Index not working when traffic encapsulated in 802.1q trunk

[ https://bro-tracker.atlassian.net/browse/TM-16?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated TM-16: - Assignee: Seth Hall Index not working when traffic encapsulated in 802.1q trunk

[Bro-Dev] [JIRA] (BIT-1162) Sumstat measurements stop working on clusters with single slow nodes

[ https://bro-tracker.atlassian.net/browse/BIT-1162?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15908#comment-15908 ] Bernhard Amann commented on BIT-1162: - It looks like BIT-1170 might completely (or at least

[Bro-Dev] [JIRA] (BIT-1171) misc/app-stats/main.bro broken for a few sites

Bernhard Amann created BIT-1171: --- Summary: misc/app-stats/main.bro broken for a few sites Key: BIT-1171 URL: https://bro-tracker.atlassian.net/browse/BIT-1171 Project: Bro Issue Tracker Issue

[Bro-Dev] [JIRA] (BIT-1162) Sumstat measurements stop working on clusters with single slow nodes

Bernhard Amann created BIT-1162: --- Summary: Sumstat measurements stop working on clusters with single slow nodes Key: BIT-1162 URL: https://bro-tracker.atlassian.net/browse/BIT-1162 Project: Bro Issue

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15812#comment-15812 ] Bernhard Amann commented on BIT-1150: - The repository now contains a policy script

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15812#comment-15812 ] Bernhard Amann edited comment on BIT-1150 at 3/20/14 12:01 AM

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1150: Assignee: Seth Hall (was: Bernhard Amann) X509 updates Key: BIT

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1150: Status: Merge Request (was: Open) X509 updates Key: BIT-1150

[Bro-Dev] [JIRA] (BIT-1160) Update cluster documentation

[ https://bro-tracker.atlassian.net/browse/BIT-1160?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15804#comment-15804 ] Bernhard Amann commented on BIT-1160: - Thanks :). I was able to set it up without too many

[Bro-Dev] [JIRA] (BIT-1160) Update cluster documentation

[ https://bro-tracker.atlassian.net/browse/BIT-1160?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15807#comment-15807 ] Bernhard Amann commented on BIT-1160: - Do we actually have any documentation on how

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1150: Status: Open (was: Merge Request) X509 updates Key: BIT-1150

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15743#comment-15743 ] Bernhard Amann commented on BIT-1150: - Ok, I am really surprised by the increase

[Bro-Dev] [JIRA] (BIT-1145) Individual set_seperator for different feeds

[ https://bro-tracker.atlassian.net/browse/BIT-1145?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15745#comment-15745 ] Bernhard Amann commented on BIT-1145: - This was merged with BIT-1154 Individual

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15750#comment-15750 ] Bernhard Amann commented on BIT-1150: - I don't quite get why that script is or should

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15752#comment-15752 ] Bernhard Amann commented on BIT-1150: - Yes, merging your faster-mhr branch seems to fix

[Bro-Dev] [JIRA] (BIT-911) SRV replies don't get processed by DNS analyzer

[ https://bro-tracker.atlassian.net/browse/BIT-911?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-911: --- Resolution: Fixed Status: Closed (was: Open) This was fixed in BIT-1147 SRV replies don't

[Bro-Dev] [JIRA] (BIT-1159) count/port comparisons silently fail when part of a record

[ https://bro-tracker.atlassian.net/browse/BIT-1159?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15757#comment-15757 ] Bernhard Amann edited comment on BIT-1159 at 3/14/14 9:04 PM

[Bro-Dev] [JIRA] (BIT-1159) count/port comparisons silently fail when part of a record

[ https://bro-tracker.atlassian.net/browse/BIT-1159?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15757#comment-15757 ] Bernhard Amann commented on BIT-1159: - To expand a bit on that - this way of constructing

Re: [Bro-Dev] [Bro-Commits] [git/bro] topic/bernhard/file-analysis-x509: Change x509 log - now certificates are only logged once per hour. (0d50b8b)

On Mar 13, 2014, at 7:37 AM, Seth Hall s...@icir.org wrote: On Mar 13, 2014, at 10:30 AM, Robin Sommer ro...@icir.org wrote: On Thu, Mar 13, 2014 at 00:17 -0700, Bernhard Amann wrote: You apparently have to be very careful which EndOfFile function of the file analysis framework you

Re: [Bro-Dev] [Bro-Commits] [git/bro] topic/bernhard/file-analysis-x509: Change x509 log - now certificates are only logged once per hour. (0d50b8b)

…even after reading through the how to, I was not quite clear on the fact, that get_file_handle has to always return the same value for the same file. Which is impossible to accomplish in cases like this, because, several certificates are sent over a connection, and you do not get any

[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1150: Status: Merge Request (was: Open) X509 updates Key: BIT-1150

[Bro-Dev] [JIRA] (BIT-760) Lift Server Alternative Name (SAN) field to scripting layer

[ https://bro-tracker.atlassian.net/browse/BIT-760?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-760: --- Status: Merge Request (was: Reopened) Lift Server Alternative Name (SAN) field to scripting layer

[Bro-Dev] [JIRA] (BIT-760) Lift Server Alternative Name (SAN) field to scripting layer

[ https://bro-tracker.atlassian.net/browse/BIT-760?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-760: --- Resolution: Fixed Status: Closed (was: Open) Lift Server Alternative Name (SAN) field

[Bro-Dev] [JIRA] (BIT-760) Lift Server Alternative Name (SAN) field to scripting layer

[ https://bro-tracker.atlassian.net/browse/BIT-760?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-760: --- Status: Reopened (was: Closed) Lift Server Alternative Name (SAN) field to scripting layer

[Bro-Dev] [JIRA] (BIT-953) SSL Analyzer: return the root CA used to validate a cert

[ https://bro-tracker.atlassian.net/browse/BIT-953?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15702#comment-15702 ] Bernhard Amann commented on BIT-953: Ok, the split of x509 handling into the file-analysis

[Bro-Dev] [JIRA] (BIT-1145) Individual set_seperator for different feeds

[ https://bro-tracker.atlassian.net/browse/BIT-1145?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1145: Affects Version/s: (was: 2.3) git/master Individual set_seperator

[Bro-Dev] [JIRA] (BIT-1146) Merge topic/bernhard/ssl-failure

[ https://bro-tracker.atlassian.net/browse/BIT-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1146: Status: Merge Request (was: Open) Merge topic/bernhard/ssl-failure

[Bro-Dev] [JIRA] (BIT-1146) Merge topic/bernhard/ssl-failure

Bernhard Amann created BIT-1146: --- Summary: Merge topic/bernhard/ssl-failure Key: BIT-1146 URL: https://bro-tracker.atlassian.net/browse/BIT-1146 Project: Bro Issue Tracker Issue Type

Re: [Bro-Dev] [Bro-Commits] [git/bro] topic/bernhard/file-analysis-x509: Second try on the event interface. (7ba6bcf)

On Feb 28, 2014, at 6:37 AM, Seth Hall s...@icir.org wrote: On Feb 28, 2014, at 6:04 AM, Bernhard Amann bernh...@icsi.berkeley.edu wrote: -event x509_extension(f: fa_file, ext: X509::Extension) +event x509_extension(f: fa_file, cert: X509::Certificate, ext: X509::Extension) Would

Re: [Bro-Dev] [Bro-Commits] [git/bro] topic/bernhard/file-analysis-x509: Second try on the event interface. (7ba6bcf)

On Feb 28, 2014, at 8:01 AM, Bernhard Amann bernh...@icsi.berkeley.edu wrote: On Feb 28, 2014, at 6:37 AM, Seth Hall s...@icir.org wrote: On Feb 28, 2014, at 6:04 AM, Bernhard Amann bernh...@icsi.berkeley.edu wrote: -event x509_extension(f: fa_file, ext: X509::Extension) +event

[Bro-Dev] [JIRA] (BIT-700) PacketSorter

[ https://bro-tracker.atlassian.net/browse/BIT-700?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15605#comment-15605 ] Bernhard Amann edited comment on BIT-700 at 2/28/14 4:59 PM: - sorry

[Bro-Dev] [JIRA] (BIT-700) PacketSorter

[ https://bro-tracker.atlassian.net/browse/BIT-700?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15605#comment-15605 ] Bernhard Amann commented on BIT-700: Uh. Sorry. Und ich dachte, dass ich einmal einen

[Bro-Dev] [JIRA] (BIT-700) PacketSorter

[ https://bro-tracker.atlassian.net/browse/BIT-700?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-700: --- Status: Merge Request (was: Open) PacketSorter Key: BIT-700

[Bro-Dev] [JIRA] (BIT-700) PacketSorter

[ https://bro-tracker.atlassian.net/browse/BIT-700?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15602#comment-15602 ] Bernhard Amann commented on BIT-700: patch to remove the packet sorter is in topic/bernhard

[Bro-Dev] [JIRA] (BIT-1144) topk_get_top returned data type

[ https://bro-tracker.atlassian.net/browse/BIT-1144?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1144: Status: Merge Request (was: Open) topk_get_top returned data type

[Bro-Dev] [JIRA] (BIT-1144) topk_get_top returned data type

[ https://bro-tracker.atlassian.net/browse/BIT-1144?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15601#comment-15601 ] Bernhard Amann commented on BIT-1144: - Second try - topic/bernhard/ticket-1144 has a new

[Bro-Dev] [JIRA] (BIT-1144) topk_get_top returned data type

[ https://bro-tracker.atlassian.net/browse/BIT-1144?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15575#comment-15575 ] Bernhard Amann commented on BIT-1144: - Yes, it is a bug, will have fixed it in a minute

[Bro-Dev] [JIRA] (BIT-1144) topk_get_top returned data type

[ https://bro-tracker.atlassian.net/browse/BIT-1144?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15576#comment-15576 ] Bernhard Amann commented on BIT-1144: - Fixed in fastpath in revision

[Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

[ https://bro-tracker.atlassian.net/browse/BIT-1143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15570#comment-15570 ] Bernhard Amann commented on BIT-1143: - Just to chime in - in my experience, the more

Re: [Bro-Dev] Dot release?

I already told Robin - but just for the record, I think it is a good idea/plan. Bernhard On Jan 30, 2014, at 8:57 AM, Slagell, Adam J slag...@illinois.edu wrote: I like that plan. I think there are some minor Maverick's issues too that Daniel found. So we might want to get those in there as

[Bro-Dev] [JIRA] (BIT-1120) Fix extend x509_extension event

[ https://bro-tracker.atlassian.net/browse/BIT-1120?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1120: Status: Merge Request (was: Open) Fix extend x509_extension event

[Bro-Dev] [JIRA] (BIT-760) Lift Server Alternative Name (SAN) field to scripting layer

[ https://bro-tracker.atlassian.net/browse/BIT-760?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15302#comment-15302 ] Bernhard Amann commented on BIT-760: BIT-1120 now allows access to the SAN field. However

[Bro-Dev] [JIRA] (BIT-1094) Segmentation Fault in SQLite Writer

[ https://bro-tracker.atlassian.net/browse/BIT-1094?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1094: Status: Merge Request (was: Open) Segmentation Fault in SQLite Writer

[Bro-Dev] [JIRA] (BIT-1094) Segmentation Fault in SQLite Writer

[ https://bro-tracker.atlassian.net/browse/BIT-1094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14700#comment-14700 ] Bernhard Amann commented on BIT-1094: - Thank you very much for the fix - it is committed

[Bro-Dev] [JIRA] (BIT-985) 'tail -f' functionality for file reading in input framework

[ https://bro-tracker.atlassian.net/browse/BIT-985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14619#comment-14619 ] Bernhard Amann commented on BIT-985: I will add this soon-ish... 'tail -f' functionality

[Bro-Dev] [JIRA] (BIT-911) SRV replies don't get processed by DNS analyzer

[ https://bro-tracker.atlassian.net/browse/BIT-911?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-911: --- Fix Version/s: (was: 2.2) 2.3 SRV replies don't get processed by DNS

[Bro-Dev] [JIRA] (BIT-865) http://www.bro-ids.org/development/projects/ is inaccessible

[ https://bro-tracker.atlassian.net/browse/BIT-865?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-865: --- Resolution: Fixed Status: Closed (was: Open) This was apparently fixed a while ago

[Bro-Dev] [JIRA] (BIT-760) Lift Server Alternative Name (SAN) field to scripting layer

[ https://bro-tracker.atlassian.net/browse/BIT-760?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-760: --- Fix Version/s: (was: 2.2) 2.3 Lift Server Alternative Name (SAN) field

[Bro-Dev] [JIRA] (BIT-911) SRV replies don't get processed by DNS analyzer

[ https://bro-tracker.atlassian.net/browse/BIT-911?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14623#comment-14623 ] Bernhard Amann commented on BIT-911: I just took a short look at this and it still does

[Bro-Dev] [JIRA] (BIT-1075) Bro Workshop videos

[ https://bro-tracker.atlassian.net/browse/BIT-1075?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1075: Resolution: Fixed Status: Closed (was: Open) All videos seem to be accessible on youtube

[Bro-Dev] [JIRA] (BIT-760) Lift Server Alternative Name (SAN) field to scripting layer

[ https://bro-tracker.atlassian.net/browse/BIT-760?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann reassigned BIT-760: -- Assignee: Bernhard Amann (was: Seth Hall) Lift Server Alternative Name (SAN) field

[Bro-Dev] [JIRA] (BIT-1086) merge topic/bernhard/new-ciphers

Bernhard Amann created BIT-1086: --- Summary: merge topic/bernhard/new-ciphers Key: BIT-1086 URL: https://bro-tracker.atlassian.net/browse/BIT-1086 Project: Bro Issue Tracker Issue Type

[Bro-Dev] [JIRA] (BIT-1072) merge topic/bernhard/hyperloglog

[ https://bro-tracker.atlassian.net/browse/BIT-1072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14100#comment-14100 ] Bernhard Amann commented on BIT-1072: - mem-leak fix and updated documentation is in topic

[Bro-Dev] [JIRA] (BIT-1072) merge topic/bernhard/hyperloglog

[ https://bro-tracker.atlassian.net/browse/BIT-1072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1072: Status: Merge Request (was: In Progress) merge topic/bernhard/hyperloglog

[Bro-Dev] [JIRA] (BIT-1072) merge topic/bernhard/hyperloglog

[ https://bro-tracker.atlassian.net/browse/BIT-1072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1072: Status: In Progress (was: Open) merge topic/bernhard/hyperloglog

[Bro-Dev] [JIRA] (BIT-953) SSL Analyzer: return the root CA used to validate a cert

[ https://bro-tracker.atlassian.net/browse/BIT-953?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-953: --- Fix Version/s: (was: 2.2) 2.3 SSL Analyzer: return the root CA used

[Bro-Dev] [JIRA] (BIT-953) SSL Analyzer: return the root CA used to validate a cert

[ https://bro-tracker.atlassian.net/browse/BIT-953?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14101#comment-14101 ] Bernhard Amann commented on BIT-953: ...this definitely won't make it into 2.2

[Bro-Dev] [JIRA] (BIT-950) Add client/server random to SSL hello events

[ https://bro-tracker.atlassian.net/browse/BIT-950?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14004#comment-14004 ] Bernhard Amann commented on BIT-950: I adapted the patch to the current layout and added

[Bro-Dev] [JIRA] (BIT-950) Add client/server random to SSL hello events

[ https://bro-tracker.atlassian.net/browse/BIT-950?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-950: --- Status: Merge Request (was: Open) Add client/server random to SSL hello events

[Bro-Dev] [JIRA] (BIT-1072) merge topic/bernhard/hyperloglog

[ https://bro-tracker.atlassian.net/browse/BIT-1072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13903#comment-13903 ] Bernhard Amann commented on BIT-1072: - So - I am officially blind

[Bro-Dev] [JIRA] (BIT-1072) merge topic/bernhard/hyperloglog

[ https://bro-tracker.atlassian.net/browse/BIT-1072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13901#comment-13901 ] Bernhard Amann commented on BIT-1072: - So it was the fault of hll (or me) after all

[Bro-Dev] [JIRA] (BIT-1072) merge topic/bernhard/hyperloglog

[ https://bro-tracker.atlassian.net/browse/BIT-1072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13818#comment-13818 ] Bernhard Amann commented on BIT-1072: - Sorry - re-merged master merge

[Bro-Dev] [JIRA] (BIT-1072) merge topic/bernhard/hyperloglog

[ https://bro-tracker.atlassian.net/browse/BIT-1072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1072: Status: Merge Request (was: Open) merge topic/bernhard/hyperloglog

[Bro-Dev] [JIRA] (BIT-1071) Initializing an opaqueval as a global segfaults Bro

Bernhard Amann created BIT-1071: --- Summary: Initializing an opaqueval as a global segfaults Bro Key: BIT-1071 URL: https://bro-tracker.atlassian.net/browse/BIT-1071 Project: Bro Issue Tracker

[Bro-Dev] [JIRA] (BIT-1072) merge topic/bernhard/hyperloglog

[ https://bro-tracker.atlassian.net/browse/BIT-1072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernhard Amann updated BIT-1072: Status: Merge Request (was: Open) merge topic/bernhard/hyperloglog

  1   2   >