[Bro] Question about http.log and conn.log.

黃馨平 jackycsie at gmail.com
Thu Dec 21 18:03:39 PST 2017

 Hi All

 I have two questions about http.log and conn.log.

(1)Why do some UID in http.log not correspond to conn.log UID?

(2)Why may one conn.log UID correspond to many flows in HTTP.log?

Thanks ~

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20171222/2d5cb8f8/attachment.html 

More information about the Bro mailing list