[Bro] truncated packets

Laleh Arshadi la_arshadi at yahoo.com
Wed Aug 7 11:13:55 PDT 2013


Dear All,
 
I know that Bro can analyze offline traffic with its -r option but I wonder if it can analyze the traffic contains truncated packets? I remember a few years ago when I run old versions of Bro on the MAWI traffic, it didn't work properly since the packets were all truncated at 54 bytes. Maybe this has changed in the newer versions? 
 
Regards
Laleh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130807/b81d8adb/attachment.html 


More information about the Bro mailing list