Re: New Analyzer
Justin Azoff <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAPfnCugxpkmb6hiTuu5KhvEWsyMR3UU0-UwE1DAXhkqAymRCJw@mail.gmail.com> |
did you run that with --plugin? On Wed, Jul 10, 2019 at 8:39 PM Aaron Heller <[email protected]> wrote: > > Hi Justin, > I started off using the binpac_quickstart script, which I thought created an external plugin? > > Thanks, > Aaron > > On Wed, Jul 10, 2019 at 8:20 PM Justin Azoff <[email protected]> wrote: >> >> On Wed, Jul 10, 2019 at 8:16 PM Aaron Heller <[email protected]> wrote: >>> >>> Maybe that and the analyzer not automatically firing off indicates an issue with the bacnet script not being called appropriately? I'm grasping at straws, so any thoughts are greatly appreciated! >> >> >> I don't think you are loading the scripts at all.. which is also why the sigs aren't loaded. >> >> Are you building this as an in-tree analyzer or as an external plugin? >> >> -- >> Justin -- Justin _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek