[Bro-Dev] #703: NUL_in_line and line_terminated_with_single_CR complaints
Bro Tracker
bro at tracker.bro-ids.org
Wed Nov 30 19:57:10 PST 2011
#703: NUL_in_line and line_terminated_with_single_CR complaints
----------------------+-----------------
Reporter: vern | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone:
Component: Bro | Version:
Resolution: | Keywords:
----------------------+-----------------
Comment (by seth):
> It would be nice to suppress these for connections that negotiated
> encryption, such as START_TLS for SMTP, since in that context these
> occurrences are not at all anomalous.
I want to handle that correctly soon by passing the data to the SSL
analyzer once the SSL upgrade occurs.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/703#comment:0>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list