[Bro-Dev] NFS and portmapper

[Robin Sommer]

On Tue, Nov 30, 2010 at 14:33 -0800, you wrote:

> I was wondering whether the Portmapper code can/will activate the NFS
> analyzer for dynamically negotiated NFS ports. Looking at portmap.bro
> and nfs.bro I don't see anything along those lines, but I would have
> expected it. Am I missing something or is this something that bro can't do?

I don't think it does, but it should be possible to add that in a
similar way as FTP data connections are handed on to the file
analyzer.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org