[Bro] id.orig_h and id.resp_h fields.

Tim Desrochers tgdesrochers at gmail.com
Sun Dec 11 12:28:12 PST 2016


That is ipv6 addresding

On Dec 11, 2016 15:26, "abdulrahman musallam" <abdulrahmanmusallam at gmail.com>
wrote:

> hi,
> i've noticed that in conn.log under id.orig_h and id.resp_h fields it does
> not show a normal IPv4 address insted i get somthing similar to this ff02::fb
> or this fe80::219:e3ff:fee7:5d23
> can anyone  please explain what do these IDs mean?
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161211/503b90ad/attachment.html 


More information about the Bro mailing list