Add tracking for MSIE 11
Description
MSIE 11.0 currently shows up as <unknown browser>. It looks like MS might have changed it's user agent string and doesn't include "MSIE". I added the following to /usr/local/bro/share/bro/base/frameworks/software/main.bro
just below the "MSIE" block and above the "Safari" block.
else if ( /Trident\/7.0/ in uparsed_version )
{
if ( /rv:11\.0/ in unparsed_version ) {
software_name = "MSIE";
v = [$major=11,$minor=0];
}
}
Disclaimer: I'm fairly new to working with Bro so this might not be the best way, but it seems to be working for me.
Thanks!
Environment
Ubuntu
