[Bro-Dev] #664: Interesting_Hostname_Login misleading

Bro Tracker bro at tracker.bro-ids.org
Sat Nov 5 18:54:49 PDT 2011


#664: Interesting_Hostname_Login misleading
----------------------+--------------------
  Reporter:  robin    |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro2.0
 Component:  Bro      |    Version:
Resolution:           |   Keywords:
----------------------+--------------------

Comment (by seth):

 > It generates messages of the from `interesting login from hostname X`
 with
 > X the *responder* of a connection.

 Thanks for filing the ticket.  I've been meaning to fix that for a while.
 Does anyone have better wording for the message?  How about "SSH login
 involving a host with an interesting name."

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/664#comment:0>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list