[Bro-Dev] #911: SRV replies don't get processed by DNS analyzer
Bro Tracker
bro at tracker.bro-ids.org
Thu Oct 25 18:06:56 PDT 2012
#911: SRV replies don't get processed by DNS analyzer
---------------------+------------------------
Reporter: vern | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone: Bro2.2
Component: Bro | Version: git/master
Keywords: |
---------------------+------------------------
The event engine doesn't appear to generate {{{dns_SRV_reply}}} in some
cases, as indicated by running on the attached trace. I've tried this
with both the default DNS analysis and my own custom analysis (that uses
-b to not run other stuff) and have confirmed that the reply event isn't
getting generated, even though there aren't any checksum issues or such.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/911>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list