# \[Bro-Commits\] \[git/bro\] topic/seth/libinjection: Integration with libinjection (https://github.com/client9/libinjection) (9ee6dff)

**URL:** <https://community.zeek.org/t/bro-commits-git-bro-topic-seth-libinjection-integration-with-libinjection-https-github-com-client9-libinjection-9ee6dff/2721>\
**Category:** Development\
**Tags:** development\
**Created:** [July 3, 2013, 8:53pm UTC](https://community.zeek.org/t/bro-commits-git-bro-topic-seth-libinjection-integration-with-libinjection-https-github-com-client9-libinjection-9ee6dff/2721 "2013-07-03T20:53:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Matthias\_Vallentin1](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/matthias_vallentin1/32/596_2.png) [@Matthias\_Vallentin1](https://community.zeek.org/u/Matthias_Vallentin1)\
**Post date:** [July 3, 2013, 8:53pm UTC](https://community.zeek.org/t/bro-commits-git-bro-topic-seth-libinjection-integration-with-libinjection-https-github-com-client9-libinjection-9ee6dff/2721/1 "2013-07-03T20:53:29Z")

</div>

> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- This is only for show. I did a tiny bit of testing with real  
> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;network traffic and there were way too many false positives for  
> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;this to be really useful. I'm not going to be filing a merge  
> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;request for this.

Very useful to know! I was about to offer a student to investigate the  
efficacy of libinjection, but given the high FPs, I am less excited  
about it. Do you think it's possible to improve on the FP rate or is  
the "model" hardcoded in the library?

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Matthias

---

<div class="post-metadata">

**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\
**Post date:** [July 3, 2013, 9:25pm UTC](https://community.zeek.org/t/bro-commits-git-bro-topic-seth-libinjection-integration-with-libinjection-https-github-com-client9-libinjection-9ee6dff/2721/2 "2013-07-03T21:25:00Z")

</div>

I don't know, the false hits make me believe it's a failing in their model, but I don't really understand how it works so I can't say that authoritatively.

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:41pm UTC](https://community.zeek.org/t/bro-commits-git-bro-topic-seth-libinjection-integration-with-libinjection-https-github-com-client9-libinjection-9ee6dff/2721/3 "2022-05-06T15:41:03Z")

</div>


