[Bro-Dev] #576: Conn.log does not use well known ports for service field anymore

Bro Tracker bro at tracker.bro-ids.org
Tue Aug 30 21:32:00 PDT 2011


#576: Conn.log does not use well known ports for service field anymore
-----------------------------+--------------------
 Reporter:  gregor           |      Owner:
     Type:  Feature Request  |     Status:  new
 Priority:  Normal           |  Milestone:  Bro1.6
Component:  Bro              |    Version:
 Keywords:  BETA             |
-----------------------------+--------------------
 The new conn.log does not use well known ports for the service field
 anymore. I actually found this feature quite convenient to have. Can we
 get it back? Maybe by adding an additional column that specifies whether
 the service field is derived from DPD or port based. Or we have a
 "dpd_service" column and a "port_service" column.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/576>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list