[Bro-Dev] #725: Incorrect weird (unmatched_HTTP_reply) in the HTTP analyzer.

Bro Tracker bro at tracker.bro-ids.org
Wed Dec 14 13:04:55 PST 2011


#725: Incorrect weird (unmatched_HTTP_reply) in the HTTP analyzer.
---------------------+--------------------
 Reporter:  seth     |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:  Bro2.1
Component:  Bro      |    Version:
 Keywords:           |
---------------------+--------------------
 The HTTP analyzer is rasing the unmatched_HTTP_reply weird if it sees a
 response that there was no packet for.  There are cases where this is
 legit and the case is handled correctly by the new http scripts so the
 weird should probably be removed since it's really just noise.  I'll
 attach a tracefile that shows a legit response-only connection.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/725>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list