[Bro-Dev] #713: IPv6 session extraction failure

Bro Tracker bro at tracker.bro-ids.org
Fri Apr 20 10:55:48 PDT 2012


#713: IPv6 session extraction failure
----------------------+--------------------
  Reporter:  seth     |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro2.1
 Component:  Bro      |    Version:
Resolution:           |   Keywords:  ipv6
----------------------+--------------------

Comment (by seth):

 > contents_<IPaddr>:<port>-<IPaddr>:<port>_orig.dat
 > and contents_<IPaddr>:<port>-<IPaddr>:<port>_resp.dat).
 >
 > One small issue I see is that a colon is used in the output filename to
 > separate the IP address from the port number, which looks OK for IPv4,
 > but could be a little confusing for IPv6.

 Good catch.  Does anyone think that IPv6 addresses include the square
 brackets when they are serialized (ODesc'd?) to strings?  It would make
 sense now that that's how it needs to be done in Bro.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/713#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list