[Bro-Dev] DNS script bug?

Matt Thompson mthompson at hexwave.com
Sun Nov 25 12:27:49 PST 2012


I'm working from latest git. It seems that dns.bro is only logging to 
the DNS log on connection_state_remove().

dns$ready is never set to T .. what is the following if supposed to be 
doing? dns$total answers == 0 here.

     if ( c$dns?$answers && c$dns?$total_answers &&
          |c$dns$answers| == c$dns$total_answers )
       {
       add c$dns_state$finished_answers[c$dns$trans_id];
       # Indicate this request/reply pair is ready to be logged.
       c$dns$ready = T;
       }
     }

Cheers,
Matt


More information about the bro-dev mailing list