[Bro-Dev] #522: Event to report non TCP/UDP/ICMP packets

Bro Tracker bro at tracker.bro-ids.org
Thu Jul 28 13:58:46 PDT 2011


#522: Event to report non TCP/UDP/ICMP packets
---------------------+------------------------
 Reporter:  gregor   |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:  Bro1.7
Component:  Bro      |    Version:  git/master
 Keywords:  IPv6     |
---------------------+------------------------
 Hi,

 it might be useful to have an event that fires if an IP packet does not
 contain TCP, UDP or ICMP, i.e., it either has a different IP protocol
 number or for IPv6 it might be some sort of extension header.

 Currently Bro silently ignores these packets.

 See  NetSessions::DoNextPacket()

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/522>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list