Hi,
Bro compiles fine, installs fine, but this is what I get while trying to
run it on opensuse 10.1 i585:
/home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 34:
run-time error: error compiling pattern /(((((((((((((((((((((^?.*(etc.*
\/.*(passwd|shadow|netconfig)))|(^?.*(IFS[ \t]*=)))|(^?.*(nph-test-cgi
\?)))|(^?.*((%0a|\.\.)\/(bin|etc|usr|tmp))))|(^?.*(\/Admin_files\/order
\.log)))|(^?.*(\/carbo\.dll)))|(^?.*(\/cgi-bin\/(phf|php\.cgi|
test-cgi))))|(^?.*(\/cgi-dos\/args\.bat)))|(^?.*(\/cgi-win\/uploader
\.exe)))|(^?.*(\/search97\.vts)))|(^?.*(tk
\.tgz)))|(^?.*(ownz)))|(^?.*(viewtopic\.php.*%.*\(.*\()))|(^?.*(sshd
\.(tar|
tgz).*)))|(^?.*([aA][dD][oO][rR][eE][bB][sS][dD].*)))|(^?.*([tT][aA][gG][gG]
[eE][dD].*)))|(^?.*(shv4\.(tar|tgz).*)))|(^?.*(lrk\.(tar|tgz).*)))|(^?.*(lyc
eum\.(tar|tgz).*)))|(^?.*(maxty\.(tar|tgz).*)))|(^?.*(rootII\.(tar|tgz).*)))
(^?.*(invader\.(tar|tgz).*))/
/home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 42:
run-time error: error compiling pattern /((^?.*(.*\/c\
+dir))|(^?.*(.*cool.dll.*)))|(^?.*(.*Admin.dll.*Admin.dll.*))/
/home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 48:
run-time error: error compiling pattern /^?.*(\/cgi-bin\/(phf|php\.cgi|
test-cgi))/
/home/vish/work/net/bro/bro-soap/policy/http-request.bro, line 50:
run-time error: error compiling pattern /^?.*(wwwroot|WWWROOT)/
/home/vish/work/net/bro/bro-soap/policy/http-reply.bro, line 110:
run-time error: error compiling pattern /^?.*(^ )/
/home/vish/work/net/bro/bro-soap/policy/hot-ids.bro, line 15: run-time
error: error compiling pattern /^?.*((y[o0]u)(r|ar[e3])([o0]wn.*))/
Is there any problem with BRO regular expressions? How can I fix it?
Thanks,
Dhanesh