[Bro-Dev] #342: Add payload to ICMP analyzer

Bro Tracker bro at tracker.icir.org
Tue Dec 14 07:42:33 PST 2010


#342: Add payload to ICMP analyzer
--------------------+--------------------
 Reporter:  seth    |      Owner:
     Type:  Patch   |     Status:  new
 Priority:  Normal  |  Milestone:  Bro1.6
Component:  Bro     |    Version:  1.5.2
 Keywords:          |
--------------------+--------------------
 This is a patch from Julien Sentier on the mailing list that makes ICMP
 payloads available at the scripting layer.  Is there a reason this isn't
 already available?  I would have committed it to fastpath except I don't
 know if it's not already doing this due to the potential overhead of
 creating a lot of strings in ICMP floods.  At the very least, I suppose it
 could be optional (which the patch doesn't currently do).

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/342>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list