[Bro] Meaning of notices in weird.log
liburdi.joshua at gmail.com
Wed Feb 25 10:19:40 PST 2015
I haven't seen a page describing what these mean, but the Bro project
on github is useful for finding this type of info.
If you take any of the strings listed in the actions table in the file
scripts/base/frameworks/notice/weird.bro and search for them on
github, you'll find where the weird is generated from. That should put
you on the right track to figuring out what it means.
On Tue, Feb 24, 2015 at 10:47 PM, Lachlan Kang <td66bshwu at gmail.com> wrote:
> Is there some kind of explanation page that describes the meaning of
> all the different notifications that can be found in weird.log?
> Specifically I want to learn what SYN_seq_jump means.
> Bro mailing list
> bro at bro-ids.org
More information about the Bro