michalpurzynski/bro-gramming

Bro IDS programs collection.

bro-gramming's Issues

excessive_http_errors_topk.bro

while running this getting below error

error in /home/binu/bro/bro-findings/bro-gramming/excessive_http_errors_topk.bro, line 142: no such field in record (MozillaHTTPErrors::c$http?$cluster_client_ip)
error in /home/binu/bro/bro-findings/bro-gramming/excessive_http_errors_topk.bro, line 142: no such field in record (MozillaHTTPErrors::c$http$cluster_client_ip)
error in string and /home/binu/bro/bro-findings/bro-gramming/excessive_http_errors_topk.bro, line 142: type clash (string and MozillaHTTPErrors::c$http$)
error in /home/binu/bro/bro-findings/bro-gramming/excessive_http_errors_topk.bro, line 142 and string: type mismatch (MozillaHTTPErrors::c$http$ and string)
error in /home/binu/bro/bro-findings/bro-gramming/excessive_http_errors_topk.bro, line 142: argument type mismatch in function call (to_addr(MozillaHTTPErrors::c$http$))
error in /home/binu/bro/bro-findings/bro-gramming/excessive_http_errors_topk.bro, line 154: no such field in record (MozillaHTTPErrors::c$http?$cluster_client_ip)
error in /home/binu/bro/bro-findings/bro-gramming/excessive_http_errors_topk.bro, line 156: no such field in record (MozillaHTTPErrors::c$http$cluster_client_ip)

unusual_http_methods.bro

while running this code i am getting below error

error in /home/binu/bro/bro-findings/bro-gramming/unusual_http_methods.bro, line 68: no such field in record (MozillaUnusualHTTP::c$http?$cluster_client_ip)
error in /home/binu/bro/bro-findings/bro-gramming/unusual_http_methods.bro, line 71: no such field in record (MozillaUnusualHTTP::c$http$cluster_client_ip)
error in string and /home/binu/bro/bro-findings/bro-gramming/unusual_http_methods.bro, line 71: type clash (string and MozillaUnusualHTTP::c$http$)
error in /home/binu/bro/bro-findings/bro-gramming/unusual_http_methods.bro, line 71 and string: type mismatch (MozillaUnusualHTTP::c$http$ and string)
error in /home/binu/bro/bro-findings/bro-gramming/unusual_http_methods.bro, line 71: argument type mismatch in function call (to_addr(MozillaUnusualHTTP::c$http$))
error in /home/binu/bro/bro-findings/bro-gramming/unusual_http_methods.bro, line 72: no such field in record (MozillaUnusualHTTP::c$http?$cluster_client_ip)
error in /home/binu/bro/bro-findings/bro-gramming/unusual_http_methods.bro, line 72: no such field in record (MozillaUnusualHTTP::c$http$cluster_client_ip)
error in string and /home/binu/bro/bro-findings/bro-gramming/unusual_http_methods.bro, line 72: type clash (string and MozillaUnusualHTTP::c$http$)
error in /home/binu/bro/bro-findings/bro-gramming/unusual_http_methods.bro, line 72 and string: type mismatch (MozillaUnusualHTTP::c$http$ and string)
error in /home/binu/bro/bro-findings/bro-gramming/unusual_http_methods.bro, line 72: argument type mismatch in function call (to_addr(MozillaUnusualHTTP::c$http$))

auth_bruteforcing.bro error

while running auth_bruteforcing.bro i am getting below error

error in /opt/bro/share/bro/site/bro-gramming/auth_bruteforcing.bro, line 157: no such field in record (AuthBruteforcing::c$http$cluster_client_ip)
error in string and /opt/bro/share/bro/site/bro-gramming/auth_bruteforcing.bro, line 157: type clash (string and AuthBruteforcing::c$http$)
error in /opt/bro/share/bro/site/bro-gramming/auth_bruteforcing.bro, line 157 and string: type mismatch (AuthBruteforcing::c$http$ and string)
error in /opt/bro/share/bro/site/bro-gramming/auth_bruteforcing.bro, line 157: argument type mismatch in function call (to_addr(AuthBruteforcing::c$http$))
error in /opt/bro/share/bro/base/frameworks/sumstats/./main.bro, lines 16-29 and /opt/bro/share/bro/site/bro-gramming/auth_bruteforcing.bro, line 157: incompatible record types (SumStats::Key and [$host=to_addr(AuthBruteforcing::c$http$)])
error in /opt/bro/share/bro/site/bro-gramming/auth_bruteforcing.bro, line 157 and /opt/bro/share/bro/base/frameworks/sumstats/./main.bro, lines 16-29: type mismatch ([$host=to_addr(AuthBruteforcing::c$http$)] and SumStats::Key)
error in /opt/bro/share/bro/site/bro-gramming/auth_bruteforcing.bro, lines 156-158: argument type mismatch in function call (SumStats::observe(http.auth_errors.attacker, [$host=to_addr(AuthBruteforcing::c$http$)], []))
warning in /opt/bro/share/bro/site/bro-gramming/auth_bruteforcing.bro, line 158: expression value ignored (SumStats::observe(http.auth_errors.attacker, [$host=to_addr(AuthBruteforcing::c$http$)], []))