[Bro] HTTP Question

Jean-Philippe Luiggi jp.luiggi at free.fr
Fri Nov 9 10:54:03 PST 2007

Diogo Corteletti de Oliveira a écrit :
> Hello,
>             Can BRO alarm on non-http traffic over port 80?
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

Hello Diogo,

I think so if you use DPD (dynamic protocol detection).
Please note there's already a file "detect-protocols.bro" which
is able to find connections with protocols on non-standard ports.

Best regards,


More information about the Bro mailing list