[Bro] Can I make Bro ignore retransmitted TCP packets

Hui Lin (Hugo) hlin33 at illinois.edu
Wed Aug 10 11:59:57 PDT 2016


I am not quite sure how Bro is handling retransmitted TCP packets at this
moment. Is there a way for me to ignore retransmitted TCP packets? I am
analysing an offline trace.


Hui Lin

Hui Lin
Ph.D. Candidate (http://hlin33.web.engr.illinois.edu/)
DEPEND (http://depend.csl.illinois.edu/)
ECE, Uni. of Illinois at Urbana-Champaign
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160810/4c9d34b1/attachment.html 

More information about the Bro mailing list