[Bro-Dev] [Bro-Commits] [git/bro] topic/policy-scripts: Moved events for filling in connection service field to dpd.bro (1a327cd)

[Robin Sommer]

On Wed, Mar 02, 2011 at 21:44 -0500, you wrote:

> field in connection records.  We had talked about DPD being enabled by
> default for the next release anyway so I was basically pushing for the
> service field being filled out for all analyzed protocols by default
> without needing to load the conn.bro script.

Yeah, I think that makes sense.

I'm really looking forward to have this all on by default to avoid the
regular confusion of what "running with DPD" means.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org