credit-card-exposure script

Zeek
1

Sorry about that. No one had commented that that script didn't work in 2.4. It works now.

Bro loads the script without generating an error. However, I still do not see any alerts appearing in notice.log.

Anything special I need to do to have it log this alert?

Thanks!

2

Could you send me some traffic that you think it should catch but isn't? (you can send privately)

  .Seth

3

Thanks for the traffic, there were some lingering bugs. I also added an option to make it work for the traffic you sent me.

redef CreditCardExposure::use_cc_separators=F;

That will make the script validate long strings of digits (it only worked if the CC# had internal separators before).

Thanks!
  .Seth