[Bro-Dev] IPv6 and software.log records

Seth Hall seth at icir.org
Sun Nov 11 14:55:06 PST 2012

On Nov 11, 2012, at 12:36 PM, Scott Campbell <scampbell at lbl.gov> wrote:

> We are running (git current) at SC this year and have a good mix of v4
> and v6 traffic.  I am seeing excellent coverage of both protocols for
> everything but software.log - in that case there are no v6 records.
> Is this a known issue?  If not, I will open a ticket.

Do you have the "local" IPv6 address space configured in Site::local_nets or networks.cfg (if running BroControl)?

By default, the software framework only tracks local software.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the bro-dev mailing list