Sudden urge to do IRC analysis

Zeek
1

I want to add the IRC analysis to my list of BRO policies. I'm running heavy-analysis which causes an error when I add irc...

[rreitz@rhyolite ~]$ bro heavy-analysis irc
/usr/local/bro/policy/heavy.irc.bro, line 3 (IRC::irc_users): error, "redef" used but not previously defined
/usr/local/bro/policy/heavy.irc.bro, line 4 (IRC::irc_channels): error, "redef" used but not previously defined

I'm using ...

[rreitz@rhyolite ~]$ bro -v
bro version 1.3.2

I can't find the variables 'irc_users' or 'irc_channels' in any policy. What am I missing?

Thanks,
Randy Reitz
Fermilab

2

I can't find the variables 'irc_users' or 'irc_channels' in any
policy. What am I missing?

Oops, yeah, that's a bug that's fixed (as of 1.3.4). Try changing them to
active_users and active_channels (though I'm not sure it's as easy as that).

    Vern