[Bro] teamcymru alerts

Seth Hall seth at icir.org
Thu Jun 12 08:02:00 PDT 2014


On Jun 12, 2014, at 10:38 AM, Allen, Brian <BrianAllen at wustl.edu> wrote:

> I assume this is an alert for an email that went from that 163.com account
> to the french_a at kids account and the malicious file BRO detected was
> attached.  

Yep.

> Do I have this right?  What about that Mail Delivery (failur... at the end?

The "..." indicates that the content was trimmed.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140612/37df38c0/attachment.bin 


More information about the Bro mailing list