[Bro] Unknown protocol in Bro
korovin.anton at gmail.com
Thu Dec 20 09:07:08 PST 2007
I used Bro version 1.1.0.
I wrote policy for dump data content, which is transferring on unknown
And I modified method NewConn() in NetSessions class:
If port value isn't handled I create instance of UnknownConnection class,
which fair events for each request/reply of its connection. These events
are handled in policy script and write the content to HDD.
How can I do the same in new versions Bro?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro