[Bro-Dev] #947: Incorrect size calculation for SSH failed/successful heuristic

Bro Tracker bro at tracker.bro-ids.org
Wed Feb 20 20:05:07 PST 2013


#947: Incorrect size calculation for SSH failed/successful heuristic
-------------------------+------------------------
  Reporter:  grigorescu  |      Owner:
      Type:  Problem     |     Status:  new
  Priority:  Low         |  Milestone:  Bro2.2
 Component:  Bro         |    Version:  git/master
Resolution:              |   Keywords:
-------------------------+------------------------

Comment (by seth):

 There is a trace attached to the fixed ticket that Vlad referenced.  Bro
 was picking the wrong TCP sequence ID to follow in some cases.  For the
 trace attached to the ticket, there is a middle box that sends a RST to
 kill the connection.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/947#comment:2>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list