[Bro-Dev] #342: Add payload to ICMP analyzer
Bro Tracker
bro at tracker.icir.org
Tue Dec 14 07:42:33 PST 2010
#342: Add payload to ICMP analyzer
--------------------+--------------------
Reporter: seth | Owner:
Type: Patch | Status: new
Priority: Normal | Milestone: Bro1.6
Component: Bro | Version: 1.5.2
Keywords: |
--------------------+--------------------
This is a patch from Julien Sentier on the mailing list that makes ICMP
payloads available at the scripting layer. Is there a reason this isn't
already available? I would have committed it to fastpath except I don't
know if it's not already doing this due to the potential overhead of
creating a lot of strings in ICMP floods. At the very least, I suppose it
could be optional (which the patch doesn't currently do).
--
Ticket URL: <http://tracker.icir.org/bro/ticket/342>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list