[Bro] WeirdActivity unknown_DNS_RR_type question
rmkml at wanadoo.fr
Wed Nov 3 16:47:26 PST 2004
last bro 09a7 version,
always event AAAA to "unknown_DNS_RR_type" weird event.
Rmkml at Wanadoo.fr
> On Fri, 17 Sep 2004, Vern Paxson wrote:
>> Date: Fri, 17 Sep 2004 16:34:11 -0700
>> From: Vern Paxson <vern at icir.org>
>> To: rmkml <rmkml at wanadoo.fr>
>> Cc: bro at bro-ids.org
>> Subject: Re: [Bro] WeirdActivity unknown_DNS_RR_type question
>>> AAAA is unknown rr type ?
>> Per CHANGES:
>> ... DNS analyzer doesn't understand AAAA yet ...
>> However, Roger Winslow & Scott Campbell have recently extended the DNS
>> analysis, and one of the several things they added was AAAA support.
>> So this will work in the next release.
More information about the Bro