[Bro] WeirdActivity unknown_DNS_RR_type question

rmkml rmkml at wanadoo.fr
Wed Nov 3 16:47:26 PST 2004


Hi list,

for information,

last bro 09a7 version,

always event AAAA to "unknown_DNS_RR_type" weird event.

Regards

Rmkml at Wanadoo.fr


> On Fri, 17 Sep 2004, Vern Paxson wrote:
>
>> Date: Fri, 17 Sep 2004 16:34:11 -0700
>> From: Vern Paxson <vern at icir.org>
>> To: rmkml <rmkml at wanadoo.fr>
>> Cc: bro at bro-ids.org
>> Subject: Re: [Bro] WeirdActivity unknown_DNS_RR_type question
>> 
>>> AAAA is unknown rr type ?
>> 
>> Per CHANGES:
>> 
>> 	... DNS analyzer doesn't understand AAAA yet ...
>> 
>> However, Roger Winslow & Scott Campbell have recently extended the DNS
>> analysis, and one of the several things they added was AAAA support.
>> So this will work in the next release.
                             ------------
>> 
>> 		Vern



More information about the Bro mailing list