Add tracking for MSIE 11

Description

MSIE 11.0 currently shows up as <unknown browser>. It looks like MS might have changed it's user agent string and doesn't include "MSIE". I added the following to /usr/local/bro/share/bro/base/frameworks/software/main.bro
just below the "MSIE" block and above the "Safari" block.

else if ( /Trident\/7.0/ in uparsed_version )
{
if ( /rv:11\.0/ in unparsed_version ) {
software_name = "MSIE";
v = [$major=11,$minor=0];
}
}

Disclaimer: I'm fairly new to working with Bro so this might not be the best way, but it seems to be working for me.
Thanks!

Environment

Ubuntu

Activity

Show:
Seth Hall
December 5, 2013, 8:06 PM

I have made some changes to your edit and it's in the topic/seth/ie11-software-parsing branch. Thanks.

Assignee

Seth Hall

Reporter

Michael Stone

Labels

External issue ID

None

Components

Affects versions

Priority

Normal
Configure