[Bro-Dev] BiF parsing index types

Seth Hall seth at icir.org
Sun May 22 23:58:07 PDT 2011


On May 18, 2011, at 3:56 PM, Will wrote:

> The odd thing is, I don't know what changed that would cause these to
> start occurring recently.


It's usually that something has changed external to Bro.  Perhaps a DNS server that hosts on your network tend to do traffic with occasionally started returning odd responses.  This seems to be how most of the edge cases are found. :)

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/




More information about the bro-dev mailing list