[Bro] bug in smtp analyzer?

erik clark philosnef at gmail.com
Wed Oct 19 05:14:50 PDT 2016


In 2.4.1, it seems that there is no c$smtp$cc field in the smtp analyzer,
but there is in 2.5. I noticed in 2.4.1, processing cc fields is haphazard
at best, and is totally unreliable. Is this really only fixed in 2.5 with
the addition of the cc processor for the smtp analyzer?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161019/6674dfe3/attachment.html 


More information about the Bro mailing list