[Bro-Dev] #947: Incorrect size calculation for SSH failed/successful heuristic
Bro Tracker
bro at tracker.bro-ids.org
Wed Feb 20 20:05:07 PST 2013
#947: Incorrect size calculation for SSH failed/successful heuristic
-------------------------+------------------------
Reporter: grigorescu | Owner:
Type: Problem | Status: new
Priority: Low | Milestone: Bro2.2
Component: Bro | Version: git/master
Resolution: | Keywords:
-------------------------+------------------------
Comment (by seth):
There is a trace attached to the fixed ticket that Vlad referenced. Bro
was picking the wrong TCP sequence ID to follow in some cases. For the
trace attached to the ticket, there is a middle box that sends a RST to
kill the connection.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/947#comment:2>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list