sooshie / bro-scripts Goto Github PK

event DNS::do_reply(c: connection, msg: dns_msg, ans: dns_answer, reply: string)
changed to:
hook DNS::do_reply(c: connection, msg: dns_msg, ans: dns_answer, reply: string)

if (c$dns?$query)
changed to:
if ((c?$dns) && (c$dns?$query))
This gets rid of the reporter.log errors when conn does not have c$dns set.

This is for both the dyndns.bro and the tor2web.bro scripts.

event DNS::do_reply(c: connection, msg: dns_msg, ans: dns_answer, reply: string)
changed to:
hook DNS::do_reply(c: connection, msg: dns_msg, ans: dns_answer, reply: string)

if (c$dns?$query)
changed to:
if ((c?$dns) && (c$dns?$query))
This gets rid of the reporter.log errors when conn does not have c$dns set.

In the dyndns.bro script one of the below lacked a "#"
#updated for bro 2.2

i get this error

1490780707.065084 error in /opt/bro/share/bro/bro-extra/vt_check.bro, line 79: no such index (VTCHECK::temp[2])
1490780707.065084 error in /opt/bro/share/bro/bro-extra/vt_check.bro, line 74: no such index (VTCHECK::temp[2])
1490780707.065084 error in /opt/bro/share/bro/bro-extra/vt_check.bro, line 91: value used but not set (VTCHECK::positives)

After a while error stops i get requests to virultotal but no results even with file hashes i manually check that are reported