[Bro-Dev] #522: Event to report non TCP/UDP/ICMP packets
Bro Tracker
bro at tracker.bro-ids.org
Thu Jul 28 13:58:46 PDT 2011
#522: Event to report non TCP/UDP/ICMP packets
---------------------+------------------------
Reporter: gregor | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone: Bro1.7
Component: Bro | Version: git/master
Keywords: IPv6 |
---------------------+------------------------
Hi,
it might be useful to have an event that fires if an IP packet does not
contain TCP, UDP or ICMP, i.e., it either has a different IP protocol
number or for IPv6 it might be some sort of extension header.
Currently Bro silently ignores these packets.
See NetSessions::DoNextPacket()
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/522>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list