[Bro] Bro bug?

Seth Hall seth at icir.org
Sun Jan 19 11:39:18 PST 2014

On Jan 19, 2014, at 12:38 PM, "Kellogg, Brian D (OLN)" <bkellogg at dresser-rand.com> wrote:

> 1390143593.839386	C3miqNnYs6FBw74c5	4235	80	tcp	-	0.086147	1594489093	0	RSTOS0	T	0	SaR	2	88	1	40	(empty)	-	US	so -eth0

This is actually a bug in Bro's handling of odd tcp sessions and it would be great to get a packet capture so we could fix this and work it into our test suite.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140119/99fe8655/attachment.bin 

More information about the Bro mailing list