[Bro] Newbie question on Bro and NetBIOS protocol

Seth Hall seth at icir.org
Mon Oct 20 07:30:10 PDT 2014

On Oct 16, 2014, at 8:18 AM, fasf safas <silusilusilu at gmail.com> wrote:

> 3. In Bro (under dns.log) i'm able to see only the query, but not its response...so i'm not able to see the netbios name.

That should be working.  The best way to help debug this would be if you provided us with a trace containing some packets that exhibit this problem.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list