Re: New Analyzer
Justin Azoff <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAPfnCugi5k5aJNZAaqsHeWPZqTYmFihWCuNWDTmCbwb=XKgVhw@mail.gmail.com> |
On Wed, Jul 10, 2019 at 8:16 PM Aaron Heller <[email protected]> wrote: > Maybe that and the analyzer not automatically firing off indicates an > issue with the bacnet script not being called appropriately? I'm grasping > at straws, so any thoughts are greatly appreciated! > I don't think you are loading the scripts at all.. which is also why the sigs aren't loaded. Are you building this as an in-tree analyzer or as an external plugin? -- Justin _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
image001.jpg
(image/jpeg, 362 B) - not displayed