[Bro] truncated packets

Laleh Arshadi la_arshadi at yahoo.com
Wed Aug 7 11:13:55 PDT 2013

Dear All,
I know that Bro can analyze offline traffic with its -r option but I wonder if it can analyze the traffic contains truncated packets? I remember a few years ago when I run old versions of Bro on the MAWI traffic, it didn't work properly since the packets were all truncated at 54 bytes. Maybe this has changed in the newer versions? 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130807/b81d8adb/attachment.html 

More information about the Bro mailing list