[Bro-Dev] #713: IPv6 session extraction failure
Bro Tracker
bro at tracker.bro-ids.org
Fri Apr 20 10:55:48 PDT 2012
#713: IPv6 session extraction failure
----------------------+--------------------
Reporter: seth | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone: Bro2.1
Component: Bro | Version:
Resolution: | Keywords: ipv6
----------------------+--------------------
Comment (by seth):
> contents_<IPaddr>:<port>-<IPaddr>:<port>_orig.dat
> and contents_<IPaddr>:<port>-<IPaddr>:<port>_resp.dat).
>
> One small issue I see is that a colon is used in the output filename to
> separate the IP address from the port number, which looks OK for IPv4,
> but could be a little confusing for IPv6.
Good catch. Does anyone think that IPv6 addresses include the square
brackets when they are serialized (ODesc'd?) to strings? It would make
sense now that that's how it needs to be done in Bro.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/713#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list