Open Merge Requests
===================
ID Component Reporter Assignee Updated For Version Priority Summary
------------ ----------- -------------- ---------- ---------- ------------- ---------- ------------------------------------------------------
BIT-1531 [1] Bro,BTest Daniel Thayer - 2016-01-28 2.5 Normal Use of mktemp command should be more portable
BIT-1527 [2] Bro Johanna Amann - 2016-01-26 2.5 Normal Please merge topic/johanna/cve-2015-3194
BIT-1507 [3] Bro Jan Grashoefer Seth Hall 2016-01-25 - Low Intel framework does not match mail addresses properly
Open Fastpath Commits
======================
Commit Component Author Date Summary
----------- ----------- ------------- ---------- ----------------------------------------------
be0d2d6 [4] bro-aux Daniel Thayer 2016-01-28 Fix the init-plugin script to be more portable
Open GitHub Pull Requests
=========================
Issue Component User Updated Title
------- ----------- ---------- ---------- -------------------------------------
#52 [5] bro J-Gras [6] 2016-01-18 Fixed matching mail address intel [7]
[1] BIT-1531 https://bro-tracker.atlassian.net/browse/BIT-1531
[2] BIT-1527 https://bro-tracker.atlassian.net/browse/BIT-1527
[3] BIT-1507 https://bro-tracker.atlassian.net/browse/BIT-1507
[4] be0d2d6 https://github.com/bro/bro-aux/commit/be0d2d639a0757d0a9664d3e8f22d26a78e28…
[5] Pull Request #52 https://github.com/bro/bro/pull/52
[6] J-Gras https://github.com/J-Gras
[7] Merge Pull Request #52 with git pull --no-ff --no-commit https://github.com/J-Gras/bro.git topic/jgras/bit-1507
Open Merge Requests
===================
ID Component Reporter Assignee Updated For Version Priority Summary
------------ ----------- -------------- ---------- ---------- ------------- ---------- ------------------------------------------------------
BIT-1531 [1] Bro,BTest Daniel Thayer - 2016-01-28 2.5 Normal Use of mktemp command should be more portable
BIT-1527 [2] Bro Johanna Amann - 2016-01-26 2.5 Normal Please merge topic/johanna/cve-2015-3194
BIT-1507 [3] Bro Jan Grashoefer Seth Hall 2016-01-25 - Low Intel framework does not match mail addresses properly
Open Fastpath Commits
======================
Commit Component Author Date Summary
----------- ----------- ------------- ---------- ----------------------------------------------
be0d2d6 [4] bro-aux Daniel Thayer 2016-01-28 Fix the init-plugin script to be more portable
Open GitHub Pull Requests
=========================
Issue Component User Updated Title
------- ----------- ---------- ---------- -------------------------------------
#52 [5] bro J-Gras [6] 2016-01-18 Fixed matching mail address intel [7]
[1] BIT-1531 https://bro-tracker.atlassian.net/browse/BIT-1531
[2] BIT-1527 https://bro-tracker.atlassian.net/browse/BIT-1527
[3] BIT-1507 https://bro-tracker.atlassian.net/browse/BIT-1507
[4] be0d2d6 https://github.com/bro/bro-aux/commit/be0d2d639a0757d0a9664d3e8f22d26a78e28…
[5] Pull Request #52 https://github.com/bro/bro/pull/52
[6] J-Gras https://github.com/J-Gras
[7] Merge Pull Request #52 with git pull --no-ff --no-commit https://github.com/J-Gras/bro.git topic/jgras/bit-1507
Open Merge Requests
===================
ID Component Reporter Assignee Updated For Version Priority Summary
------------ ----------- -------------- ---------- ---------- ------------- ---------- ------------------------------------------------------
BIT-1531 [1] Bro,BTest Daniel Thayer - 2016-01-28 2.5 Normal Use of mktemp command should be more portable
BIT-1527 [2] Bro Johanna Amann - 2016-01-26 2.5 Normal Please merge topic/johanna/cve-2015-3194
BIT-1507 [3] Bro Jan Grashoefer Seth Hall 2016-01-25 - Low Intel framework does not match mail addresses properly
Open Fastpath Commits
======================
Commit Component Author Date Summary
----------- ----------- ------------- ---------- ----------------------------------------------
be0d2d6 [4] bro-aux Daniel Thayer 2016-01-28 Fix the init-plugin script to be more portable
Open GitHub Pull Requests
=========================
Issue Component User Updated Title
------- ----------- ---------- ---------- -------------------------------------
#52 [5] bro J-Gras [6] 2016-01-18 Fixed matching mail address intel [7]
[1] BIT-1531 https://bro-tracker.atlassian.net/browse/BIT-1531
[2] BIT-1527 https://bro-tracker.atlassian.net/browse/BIT-1527
[3] BIT-1507 https://bro-tracker.atlassian.net/browse/BIT-1507
[4] be0d2d6 https://github.com/bro/bro-aux/commit/be0d2d639a0757d0a9664d3e8f22d26a78e28…
[5] Pull Request #52 https://github.com/bro/bro/pull/52
[6] J-Gras https://github.com/J-Gras
[7] Merge Pull Request #52 with git pull --no-ff --no-commit https://github.com/J-Gras/bro.git topic/jgras/bit-1507
[ https://bro-tracker.atlassian.net/browse/BIT-1531?page=com.atlassian.jira.p… ]
Daniel Thayer updated BIT-1531:
-------------------------------
Status: Merge Request (was: Open)
> Use of mktemp command should be more portable
> ---------------------------------------------
>
> Key: BIT-1531
> URL: https://bro-tracker.atlassian.net/browse/BIT-1531
> Project: Bro Issue Tracker
> Issue Type: Task
> Components: Bro, BTest
> Reporter: Daniel Thayer
> Fix For: 2.5
>
>
> The use of the mktemp command breaks on some platforms, because
> we only use three Xs in our templates, but some platforms require at
> least six Xs.
--
This message was sent by Atlassian JIRA
(v7.1.0-OD-05-006#71001)
[ https://bro-tracker.atlassian.net/browse/BIT-1531?page=com.atlassian.jira.p… ]
Daniel Thayer commented on BIT-1531:
------------------------------------
In the bro and btest repos, the branch "topic/dnthayer/mktemp" fixes this issue.
> Use of mktemp command should be more portable
> ---------------------------------------------
>
> Key: BIT-1531
> URL: https://bro-tracker.atlassian.net/browse/BIT-1531
> Project: Bro Issue Tracker
> Issue Type: Task
> Components: Bro, BTest
> Reporter: Daniel Thayer
> Fix For: 2.5
>
>
> The use of the mktemp command breaks on some platforms, because
> we only use three Xs in our templates, but some platforms require at
> least six Xs.
--
This message was sent by Atlassian JIRA
(v7.1.0-OD-05-006#71001)
Daniel Thayer created BIT-1531:
----------------------------------
Summary: Use of mktemp command should be more portable
Key: BIT-1531
URL: https://bro-tracker.atlassian.net/browse/BIT-1531
Project: Bro Issue Tracker
Issue Type: Task
Components: Bro, BTest
Reporter: Daniel Thayer
Fix For: 2.5
The use of the mktemp command breaks on some platforms, because
we only use three Xs in our templates, but some platforms require at
least six Xs.
--
This message was sent by Atlassian JIRA
(v7.1.0-OD-05-006#71001)
[ https://bro-tracker.atlassian.net/browse/BIT-161?page=com.atlassian.jira.pl… ]
Adam Slagell updated BIT-161:
-----------------------------
Resolution: No longer applies
Status: Closed (was: Open)
Broping is gone.
> In standalone mode, broctl attempts to connect to wrong port.
> -------------------------------------------------------------
>
> Key: BIT-161
> URL: https://bro-tracker.atlassian.net/browse/BIT-161
> Project: Bro Issue Tracker
> Issue Type: Problem
> Components: BroControl
> Affects Versions: 1.5.2
> Reporter: Seth Hall
> Assignee: Daniel Thayer
> Priority: Low
> Labels: warning
>
> I have a standalone instance setup and the bro process is holding open port 47758/tcp, but the broctl interface is attempting to connect to port 47760/tcp when it tries to do anything with broccoli.
> {noformat}
> [BroControl] > netstats
> bro: <error: cannot connect to 127.0.0.1:47760>
> {noformat}
> {noformat}
> seth@Blake3:~$ sudo lsof -i | grep LISTEN
> bro 74156 root 0u IPv4 0xb3ad270 0t0 TCP *:47758 (LISTEN)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.1.0-OD-05-006#71001)
[ https://bro-tracker.atlassian.net/browse/BIT-253?page=com.atlassian.jira.pl… ]
Adam Slagell updated BIT-253:
-----------------------------
Resolution: Won't Fix
Status: Closed (was: Open)
We are going to be solving this problem more generally to warn users of potentially dangerous changes.
> Can't bind to port 47760, Address already in use
> ------------------------------------------------
>
> Key: BIT-253
> URL: https://bro-tracker.atlassian.net/browse/BIT-253
> Project: Bro Issue Tracker
> Issue Type: Problem
> Components: BroControl
> Affects Versions: 1.5.2
> Reporter: tyler.schoenke
> Assignee: Daniel Thayer
> Priority: Low
> Fix For: 2.5
>
>
> I ran into some strange behavior with the cluster. I was still receiving email alerts, but the log files on the manager contained only headers with no log messages. The connection summary emails had the columns and summaries with all of the values being empty.
> I ran a dumpcap on my manager's eth0 filtering my worker IP, and saw that the logs were being sent to the manager. I could start the cluster run broctl stats, and diag with no errors. I finally saw "Can't bind to port 47760, Address already in use" in the remote.log on the manager. After stopping the cluster and looking for LISTENing processes, saw that something was bound to that port. I checked for running bro processes and saw that some hadn't terminated when the cluster was stopped. After killing those, the cluster started working properly.
> My enhancement request is to have something added to the cluster startup script that reports an error if the manager or workers encounter an error binding to a port. This error could either prevent the cluster from starting, or just print some message to let the user know there is a problem with port binding.
--
This message was sent by Atlassian JIRA
(v7.1.0-OD-05-006#71001)