[Bro] smtp.log field

Ohhello Nicetomeetu phucahwa at gmail.com
Mon Jun 9 08:35:37 PDT 2014


Hi all,

Im a new BRO user and still have much to learn. Looking at the log files
(http.log and smtp.log), i've noticed some of the fields have the "-" unset
value. Particularly, im looking at the smtp.log file and noticed the
"x-originating-ip" field has unset value. What is the correct way to have
this value correctly logged.

Thanks in advance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140609/da86a2e7/attachment.html 


More information about the Bro mailing list