# Error in Netbios analyzer

**URL:** <https://community.zeek.org/t/error-in-netbios-analyzer/3536>\
**Category:** Zeek\
**Created:** [March 27, 2015, 5:22pm UTC](https://community.zeek.org/t/error-in-netbios-analyzer/3536 "2015-03-27T17:22:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Danilo\_Nicolo](https://avatars.discourse-cdn.com/v4/letter/d/5f8ce5/32.png) [@Danilo\_Nicolo](https://community.zeek.org/u/Danilo_Nicolo)\
**Post date:** [March 27, 2015, 5:22pm UTC](https://community.zeek.org/t/error-in-netbios-analyzer/3536/1 "2015-03-27T17:22:50Z")

</div>

Hi all,

I’m working on an application based on Bro and we need to use SMB and Netbios analyzers at the moment.  
If I try to use the NetBIOS SSN analyzer found in the master git, I receive an error when I try to enable the analyzer.

Analyzer::enable\_analyzer(Analyzer::ANALYZER\_NETBIOSSSN);

Analyzer::register\_for\_ports(Analyzer::ANALYZER\_NETBIOSSSN, ports);

This is the received error:

Internal error: unknown analyzer name NETBIOS; mismatch with tag analyzer::Component?

So I have seen the NetbiosSSN.cc file and I have found the line that should be fixed.

At line 458 you can see that

NetbiosSSN\_Analyzer::NetbiosSSN\_Analyzer(Connection\* conn) :tcp::TCP\_ApplicationAnalyzer(“NETBIOS”, conn)

I’ve changed “NETBIOS” string to “NETBIOSSN”, then re-built it and Bro worked.

Can you let me know that this fix is correct?

Thank you.

Best regards,  
Danilo

---

<div class="post-metadata">

**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\
**Post date:** [March 27, 2015, 6:43pm UTC](https://community.zeek.org/t/error-in-netbios-analyzer/3536/2 "2015-03-27T18:43:15Z")

</div>

If you’re working with master, that code is no longer current. You also don’t want to rely on Bro for SMB analysis right now either as the analyzer is incomplete and broken.

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![Danilo\_Nicolo](https://avatars.discourse-cdn.com/v4/letter/d/5f8ce5/32.png) [@Danilo\_Nicolo](https://community.zeek.org/u/Danilo_Nicolo)\
**Post date:** [March 30, 2015, 9:06am UTC](https://community.zeek.org/t/error-in-netbios-analyzer/3536/3 "2015-03-30T09:06:25Z")

</div>

Hi Seth,

Sorry, but I don’t understand.I’m only using your NetBIOS analyzer in the master branch (without SMB) and I’ve found that code in the tree master at [https://github.com/bro/bro/blob/master/src/analyzer/protocol/netbios/NetbiosSSN.cc](https://github.com/bro/bro/blob/master/src/analyzer/protocol/netbios/NetbiosSSN.cc) line 459.

Could you explain me where I’m making mistakes?

Thank you very much.

Regards,  
Danilo

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:42pm UTC](https://community.zeek.org/t/error-in-netbios-analyzer/3536/4 "2022-05-06T15:42:33Z")

</div>


