[Bro-Dev] #911: SRV replies don't get processed by DNS analyzer

Bro Tracker bro at tracker.bro-ids.org
Thu Oct 25 18:06:56 PDT 2012


#911: SRV replies don't get processed by DNS analyzer
---------------------+------------------------
 Reporter:  vern     |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:  Bro2.2
Component:  Bro      |    Version:  git/master
 Keywords:           |
---------------------+------------------------
 The event engine doesn't appear to generate {{{dns_SRV_reply}}} in some
 cases, as indicated by running on the attached trace.  I've tried this
 with both the default DNS analysis and my own custom analysis (that uses
 -b to not run other stuff) and have confirmed that the reply event isn't
 getting generated, even though there aren't any checksum issues or such.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/911>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list