[Bro] Bro and NetBIOS
seth at icir.org
Mon Oct 20 07:33:27 PDT 2014
On Oct 20, 2014, at 6:50 AM, Vito Logrillo <vitologrillo at gmail.com> wrote:
> i'm trying to use BRO to analyze data based on NetBIOS protocol: i'm using BRO 2.3.1.
SMB support in 2.3.1 (and earlier) is broken and wildly incomplete.
> Another question: SMB2.0 protocol is supported by BRO or not?
It should be moderately supported in 2.4. Broala has contributed an SMB (1+2) analyzer and it should be in 2.4.
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro