Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-10 10:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add NEWS about incompatible local.bro changes, addresses BIT-1047.

Browse source
This commit is contained in:
Jon Siwek 2013-10-23 11:30:59 -05:00
parent 0938150453
commit 34aece4ddd
1 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
NEWS
View file

@ -246,6 +246,19 @@ most submodules.
Changed Functionality Changed Functionality
--------------------- ---------------------
- Previous versions of ``$prefix/share/bro/site/local.bro`` (where
"$prefix" indicates the installation prefix of Bro), aren't compatible
with Bro 2.2. This file won't be overwritten when installing over a
previous Bro installation to prevent clobbering users' modifications,
but an example of the new version is located in
``$prefix/share/bro/site/local.bro.example``. So if no modification
has been done to the previous local.bro, just copy the new example
version over it, else merge in the differences. For reference,
a common error message when attempting to use an outdated local.bro
looks like::
fatal error in /usr/local/bro/share/bro/policy/frameworks/software/vulnerable.bro, line 41: BroType::AsRecordType (table/record) (set[record { min:record { major:count; minor:count; minor2:count; minor3:count; addl:string; }; max:record { major:count; minor:count; minor2:count; minor3:count; addl:string; }; }])
- The interface to extracting content from application-layer protocols - The interface to extracting content from application-layer protocols
(including HTTP, SMTP, FTP) has changed significantly due to the (including HTTP, SMTP, FTP) has changed significantly due to the
introduction of the new file analysis framework (see above). introduction of the new file analysis framework (see above).