[Bro-Dev] #313: DPD: ProtocolConfirmation, ProtocolViolation revamp

[Bro Tracker]

#313: DPD: ProtocolConfirmation, ProtocolViolation revamp
-----------------------------+-----------------
 Reporter:  gregor           |      Owner:
     Type:  Feature Request  |     Status:  new
 Priority:  Normal           |  Milestone:
Component:  Bro              |    Version:
 Keywords:                   |
-----------------------------+-----------------
 A while ago (2yrs) Robin and me discussed the ProtocolConfirmation() and
 ProtcolViolation semantics and found that they don't have crisp
 definitions and that they are used inconsistently. We came up with the
 following proposal, however, we never followed up. So, I'm proposing it
 again.

 Proposal can be found here:
 http://bro.icir.org/devel/projects/violation-confirmation.html

 (ask bro-dev at ... if you want access to the above website)

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/313>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker