[Bro] connection states
rjenkins at rmjconsulting.net
Sun Jul 21 02:36:30 PDT 2013
I too would be interested in knowing.
Ron Jenkins (SnortCP,VCP 3 / 4,MCNE,MCPS,MCNPS,CCNA)
RMJ Consulting, LLC.
"Bringing Companies and Solutions Together"
Owner / Senior Architect
11715 Bricksome Ave STE B-7
Baton Rouge, LA 70816
7575 Jefferson Hwy #103
Baton Rouge, LA 70806
Email. rjenkins at rmjconsulting.net<mailto:rjenkins at rmjconsulting.net>
On Jul 21, 2013, at 1:14 AM, "Laleh Arshadi" <la_arshadi at yahoo.com<mailto:la_arshadi at yahoo.com>> wrote:
Seems that Bro classifies connections into a number of states in its "connection summaries" log files. States such SF, REJ, etc. upon which it then classifies the connection into one of the three states "good", "bad' or "unkown". I was wondering if one could give me a direct pointer to a reference in which these states are discussed thoroughly.
Bro mailing list
bro at bro-ids.org<mailto:bro at bro-ids.org>
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro