[Bro-Dev] #1014: Weirds could be unique

Bro Tracker bro at tracker.bro.org
Wed Jun 5 09:09:45 PDT 2013


#1014: Weirds could be unique
------------------------+-----------------------------
 Reporter:  thorkill    |       Type:  Feature Request
   Status:  new         |   Priority:  Low
Milestone:  Bro2.2      |  Component:  Bro
  Version:  git/master  |   Keywords:
------------------------+-----------------------------
 It would be nice to have unique wireds for each "test" which generates it.
 "An explanation what each of those 'weirds' would represent would be
 helpful"

 Most iteresting for me are: fragment_protocol_inconsistency,
 fragment_size_inconsistency and truncated_IP.

 This will give you an overview about current names:
 {{{
 grep Weird *.cc | cut -d'"' -f2 | sort | uniq -c | sort -n
 }}}

-- 
Ticket URL: <http://tracker.bro.org/bro/ticket/1014>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list