[Bro-Dev] IPv6 and software.log records

[Seth Hall]

On Nov 11, 2012, at 12:36 PM, Scott Campbell <scampbell at lbl.gov> wrote:

> We are running (git current) at SC this year and have a good mix of v4
> and v6 traffic.  I am seeing excellent coverage of both protocols for
> everything but software.log - in that case there are no v6 records.
> Is this a known issue?  If not, I will open a ticket.


Do you have the "local" IPv6 address space configured in Site::local_nets or networks.cfg (if running BroControl)?

By default, the software framework only tracks local software.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/