[Bro] Problem with connections in S1 and SF state
sven at dreyer-net.de
Thu Apr 28 06:54:34 PDT 2016
Am 27.04.2016 um 16:59 schrieb James Lay:
> Read this thread:
> It might help.
In my case, it's not UDP, but TCP. Due to the handshake at the beginning
of a TCP connection, initiator and receiver of the connection can be
distinguished, and conn.log says that bro saw the initial connection
setup (ShA flags in history field).
More information about the Bro