[Bro] Questions about Bro's DNS Parser

Seth Hall hall.692 at osu.edu
Mon Jan 25 12:21:53 PST 2010

On Jan 24, 2010, at 11:17 PM, daniela.miao at utoronto.ca wrote:

> bro -r test.pcap dns
> I believe this is correct?

Yes, that should be correct.  Can you share the tracefile?


Seth Hall
Network Security - Office of the CIO
The Ohio State University
Phone: 614-292-9721

More information about the Bro mailing list