I wrote a parser for the IEC60870-5-104 protocol that utilizes lists as a wrapper just like the http parser. When I run this on captures it will crash at times. The most common crash is just before the bro_done event. A stacktrace from gdb can be found here: http://pastebin.com/z0njtRHJ
I wrote a parser for the IEC60870-5-104 protocol that utilizes lists as a wrapper just like the http parser. When I run this on captures it will crash at times. The most common crash is just before the bro_done event. A stacktrace from gdb can be found here: http://pastebin.com/z0njtRHJ