[Bro-Dev] #713: IPv6 session extraction failure

Bro Tracker bro at tracker.bro-ids.org
Fri Apr 20 09:05:48 PDT 2012


#713: IPv6 session extraction failure
----------------------+--------------------
  Reporter:  seth     |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro2.1
 Component:  Bro      |    Version:
Resolution:           |   Keywords:  ipv6
----------------------+--------------------

Comment (by dnthayer):

 I tested this with the latest code in master (I had to first set
 "default_extract = T" in
 base/protocols/conn/contents.bro), and I see two files created that are
 both non-zero
 length (filenames are of the form:
 contents_<IPaddr>:<port>-<IPaddr>:<port>_orig.dat
 and contents_<IPaddr>:<port>-<IPaddr>:<port>_resp.dat).

 One small issue I see is that a colon is used in the output filename to
 separate the IP address from the port number, which looks OK for IPv4,
 but could be a little confusing for IPv6.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/713#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list