[Bro-Dev] #576: Conn.log does not use well known ports for service field anymore
Bro Tracker
bro at tracker.bro-ids.org
Tue Aug 30 21:32:00 PDT 2011
#576: Conn.log does not use well known ports for service field anymore
-----------------------------+--------------------
Reporter: gregor | Owner:
Type: Feature Request | Status: new
Priority: Normal | Milestone: Bro1.6
Component: Bro | Version:
Keywords: BETA |
-----------------------------+--------------------
The new conn.log does not use well known ports for the service field
anymore. I actually found this feature quite convenient to have. Can we
get it back? Maybe by adding an additional column that specifies whether
the service field is derived from DPD or port based. Or we have a
"dpd_service" column and a "port_service" column.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/576>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list