[Bro] File Extraction wierdness

Seth Hall seth at icir.org
Wed Feb 10 10:16:48 PST 2016

> On Feb 10, 2016, at 12:36 PM, Blake Mackey <Blake.Mackey at rmc.ca> wrote:
> Is the format in this trace somehow preventing proper reassembly with Bro?

There are a number of things that could be causing the trouble.  You can send me some traffic off list again if you'd like me to take a look at it.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list