Re: ActiveHTTP Module Error

Great, that is what I was missing! Thank you!

________________________________
From: Jon Siwek <[email protected]>
Sent: Tuesday, June 4, 2019 11:19:49 AM
To: Blake Moss
Cc: [email protected]
Subject: Re: [Zeek] ActiveHTTP Module Error

On Tue, Jun 4, 2019 at 10:06 AM Blake Moss <[email protected]> wrote:

> Does anyone have an example of using this in a script they would be willing to share?

There's an example in
testing/btest/scripts/base/utils/active-http.test.  In your example,
if you're running from the command line and/or reading a pcap, you
need to add this:

    redef exit_only_after_terminate = T;

That is, "when" statements and the ActiveHTTP modules are executed
asynchronously.  The block of code within the "when" gets executed
whenever the results are ready, and if you're on command-line without
an indefinite source of input, the process exits before the results
are obtained.

- Jon

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek