[Bro] TEREDO bug
Siwek, Jonathan Luke
jsiwek at illinois.edu
Mon Oct 1 13:29:50 PDT 2012
> I don't think TEREDO is working correctly. It is filling up the known_services.log with entries for local host ports that I know are closed just because there was a TEREDO packet sent to that port.
It's not so much Teredo working incorrectly as it is the combination of how it works with the way known-services.bro decides something is a service, which could be improved.
I've created a ticket to track the issue: http://tracker.bro-ids.org/bro/ticket/890
More information about the Bro