[Bro] How to configure Bro to detect UDP port 53

Qinwen Hu qhu009 at aucklanduni.ac.nz
Wed Jan 28 15:38:47 PST 2015

Hi all,

I am a new Bro user, I did few experiments to read the same DNS trace file
via Bro online version and Bro from my personal PC. The version number is

I got some interesting results. the online version checks UDP port 53 5353
and 5355
id.resp_p  proto   trans_id  query
5353         UDP

But, the one on my PC only checks port 5353 and 5355.

Is this a configuration issue? And is there a way that I can configure my
Bro to check port 53?




胡勤文/Qinwen Hu

Ph.D. Candidate, Computer Science, University of Auckland
奥克兰大学  计算机科学 博士研究生
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150129/ae3917a5/attachment-0001.html 

More information about the Bro mailing list