Ticket #270 (seen defect)

Opened 22 months ago

Last modified 22 months ago

Sending addresses via pybroccoli doesn't work

Reported by: robin Owned by: kreibich
Priority: Normal Milestone:
Component: Broccoli Version: 1.5.2
Keywords: pybroccoli Cc:

Description

When sending events with arguments of type "addr" from Bro, a receiving pybroccoli client hangs. Not clear whether it's a problem of Broccoli or pybroccolli, but most likely it's the latter.

Ask Robin for a set of scripts to reproduce the problem.

Attachments

test.bro Download (296 bytes) - added by anonymous 22 months ago.
dns.py Download (383 bytes) - added by anonymous 22 months ago.
tm-wait-for.bro Download (608 bytes) - added by anonymous 22 months ago.

Change History

comment:1 Changed 22 months ago by kreibich

  • Status changed from new to seen

Could you send me those scripts? I'll look into it.

Changed 22 months ago by anonymous

Changed 22 months ago by anonymous

Changed 22 months ago by anonymous

comment:2 Changed 22 months ago by anonymous

Attaching the scripts. If using the string-version of the event, it works' fine. With the addr-version, the Python script hangs (with high CPU).

bro -r some-trace --pseudo-realtime=1 ./test.bro ./tm-wait-for.bro
python dns.py

Note: See TracTickets for help on using tickets.