[Bro] How to configure Bro to detect UDP port 53
qhu009 at aucklanduni.ac.nz
Wed Jan 28 15:38:47 PST 2015
I am a new Bro user, I did few experiments to read the same DNS trace file
via Bro online version and Bro from my personal PC. The version number is
I got some interesting results. the online version checks UDP port 53 5353
id.resp_p proto trans_id query
But, the one on my PC only checks port 5353 and 5355.
Is this a configuration issue? And is there a way that I can configure my
Bro to check port 53?
Ph.D. Candidate, Computer Science, University of Auckland
奥克兰大学 计算机科学 博士研究生
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro