11 Dec
2012
11 Dec
'12
10:26 p.m.
Say I wanted a bro script to call out to an external program, and I wanted
to get the output from the external program into my bro script.
This thread shows that I can call an external program with system():
http://mailman.icsi.berkeley.edu/pipermail/bro/2004-August/001555.html
Based on the old bro wiki, it looks like the output from that command gets
redirected to stderr:
http://www-old.bro-ids.org/wiki/index.php/Reference_Manual:_Predefined_Vari…
Is there anything like system() that returns the output of an external
command?
-Chris
11 Dec
11 Dec
10:47 p.m.
On Dec 11, 2012, at 4:26 PM, Chris Crawford <christopher.p.crawford(a)gmail.com>
wrote:
Is there anything like system() that returns the
output of an external command?
I hate that I'm even pointing this out on the mailing list, but here it goes…
You can do it with the input framework and system command together. I have a minimal
example that I wrote for the SecurityOnion guys for their Bro installation. This script
runs the hostname command and collects the output.
https://github.com/sethhall/bro-securityonion/blob/master/hostname.bro
Have fun. :)
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/
3453
days inactive
3453
days old
1 comments
2 participants
participants (2)
-
Chris Crawford -
Seth Hall