[Bro-Dev] connection_established behavior

[Seth Hall]

On Dec 17, 2010, at 4:07 AM, Robin Sommer wrote:

>    # If true, instantiate connection state when a SYN ack is seen
>    # but not the initial SYN (even if partial_connection_ok is false).
>    const tcp_SYN_ack_ok = T &redef;
> 
> Perhaps we should just change the default?

Ah!  I should have looked.  I didn't even know that about that option.  It would say that it's worthwhile to change the default because it would at least make the output the same with and without connection compressor (and not changing any other settings).

  .Seth