[Bro-Dev] #713: IPv6 session extraction failure
Bro Tracker
bro at tracker.bro-ids.org
Fri Apr 20 09:05:48 PDT 2012
#713: IPv6 session extraction failure
----------------------+--------------------
Reporter: seth | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone: Bro2.1
Component: Bro | Version:
Resolution: | Keywords: ipv6
----------------------+--------------------
Comment (by dnthayer):
I tested this with the latest code in master (I had to first set
"default_extract = T" in
base/protocols/conn/contents.bro), and I see two files created that are
both non-zero
length (filenames are of the form:
contents_<IPaddr>:<port>-<IPaddr>:<port>_orig.dat
and contents_<IPaddr>:<port>-<IPaddr>:<port>_resp.dat).
One small issue I see is that a colon is used in the output filename to
separate the IP address from the port number, which looks OK for IPv4,
but could be a little confusing for IPv6.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/713#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list