[Bro-Dev] Questions about dns.log

Robin Sommer robin at icir.org
Tue Nov 29 09:45:31 PST 2011


On Tue, Nov 29, 2011 at 12:41 -0500, you wrote:

> the query.  The technical details (even response type) matter
> surprisingly little in most cases.

Maybe, but right now at least the TTL is just misleading/confusing I
think as it's not clear what it belongs to. 

>  I would definitely like to talk about it more though.

We can do that. :)

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org


More information about the bro-dev mailing list