[Bro-Dev] #703: NUL_in_line and line_terminated_with_single_CR complaints

Bro Tracker bro at tracker.bro-ids.org
Wed Nov 30 19:57:10 PST 2011


#703: NUL_in_line and line_terminated_with_single_CR complaints
----------------------+-----------------
  Reporter:  vern     |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:
 Component:  Bro      |    Version:
Resolution:           |   Keywords:
----------------------+-----------------

Comment (by seth):

 > It would be nice to suppress these for connections that negotiated
 > encryption, such as START_TLS for SMTP, since in that context these
 > occurrences are not at all anomalous.


 I want to handle that correctly soon by passing the data to the SSL
 analyzer once the SSL upgrade occurs.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/703#comment:0>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list