[Bro-Dev] #342: Add payload to ICMP analyzer

Bro Tracker bro at tracker.icir.org
Fri Dec 17 07:23:12 PST 2010


#342: Add payload to ICMP analyzer
---------------------+--------------------
  Reporter:  seth    |      Owner:
      Type:  Patch   |     Status:  new
  Priority:  Normal  |  Milestone:  Bro1.6
 Component:  Bro     |    Version:  1.5.2
Resolution:          |   Keywords:
---------------------+--------------------

Comment (by matti):

 Replying to [comment:7 seth]:
 > > Actually the echo message events already have the payload available to
 > > them on the scripting level.
 >
 > Oh, what event does this patch add the payload body to?

 That seems to be the generic icmp_sent message which is raised when there
 isn't any of the more specific events raised.

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/342#comment:8>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list