[Bro-Dev] [Bro-Commits] [git/bro] topic/policy-scripts: Moved events for filling in connection service field to dpd.bro (1a327cd)
robin at icir.org
Fri Mar 4 10:26:46 PST 2011
On Wed, Mar 02, 2011 at 21:44 -0500, you wrote:
> field in connection records. We had talked about DPD being enabled by
> default for the next release anyway so I was basically pushing for the
> service field being filled out for all analyzed protocols by default
> without needing to load the conn.bro script.
Yeah, I think that makes sense.
I'm really looking forward to have this all on by default to avoid the
regular confusion of what "running with DPD" means.
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the bro-dev