[Bro] Parsing Extension Mechanisms for DNS (EDNS0) Fields
jmellander at lbl.gov
Thu Oct 5 12:22:29 PDT 2017
If you look at share/bro/base/protocols/dns/main.bro, you will find that
the EDNS section is commented out, and labeled: TODO: figure out how to
So, its another area of Bro that Needs Work™
On Thu, Oct 5, 2017 at 4:31 AM, Benjamin Klimkowski <bhklimk at gmail.com>
> I am trying to analyze the client subnet option (RFC 7871) in some of the
> network traffic where it is set. It is not appear in dns.log. Also it
> appears to cause an issue in weird.log.
> Is this a known issue or bug?
> Bro mailing list
> bro at bro-ids.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro