[Bro-Dev] #1014: Weirds could be unique
Bro Tracker
bro at tracker.bro.org
Wed Jun 5 09:09:45 PDT 2013
#1014: Weirds could be unique
------------------------+-----------------------------
Reporter: thorkill | Type: Feature Request
Status: new | Priority: Low
Milestone: Bro2.2 | Component: Bro
Version: git/master | Keywords:
------------------------+-----------------------------
It would be nice to have unique wireds for each "test" which generates it.
"An explanation what each of those 'weirds' would represent would be
helpful"
Most iteresting for me are: fragment_protocol_inconsistency,
fragment_size_inconsistency and truncated_IP.
This will give you an overview about current names:
{{{
grep Weird *.cc | cut -d'"' -f2 | sort | uniq -c | sort -n
}}}
--
Ticket URL: <http://tracker.bro.org/bro/ticket/1014>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list