[Bro] SIP Analyzer

Vern Paxson vern at icir.org
Mon Jan 31 12:24:17 PST 2005

> Can Bro capture SIP and RTP traffic irrespective of
> port the streams they use? 

No.  For one, Bro doesn't have RTP or SIP analyzers.  In addition, it
doesn't have the capability to analyze applications that are not running
on known ports, though addressing this is on the to-do list and I believe
some students are gearing up to tackle it.


More information about the Bro mailing list