Re: New Analyzer
Aaron Heller <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CABepR1dStgJUOfZZS=dSRZVxEZzFJpKvvRvNvHRohYwmetsjsg@mail.gmail.com> |
Hi Justin, I started off using the binpac_quickstart script, which I thought created an external plugin? Thanks, Aaron On Wed, Jul 10, 2019 at 8:20 PM Justin Azoff <[email protected]> wrote: > On Wed, Jul 10, 2019 at 8:16 PM Aaron Heller <[email protected]> wrote: > >> Maybe that and the analyzer not automatically firing off indicates an >> issue with the bacnet script not being called appropriately? I'm grasping >> at straws, so any thoughts are greatly appreciated! >> > > I don't think you are loading the scripts at all.. which is also why the > sigs aren't loaded. > > Are you building this as an in-tree analyzer or as an external plugin? > > -- > Justin > _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek