[Bro-Dev] #1022: HTTP bogus events

[Bro Tracker]

#1022: HTTP bogus events
-----------------------+--------------------
  Reporter:  thorkill  |      Owner:
      Type:  Problem   |     Status:  new
  Priority:  High      |  Milestone:  Bro2.2
 Component:  Bro       |    Version:  2.1
Resolution:            |   Keywords:  http
-----------------------+--------------------

Comment (by seth):

 > xx.xx.xx.xx:80/tcp (uid ngRQOFjBgsg)
 >   unknown_HTTP_method={Accept: text/*} (0 missed bytes)
 >   # 87.139.xxx.2xx = p57xxx4xx.dip0.t-ipconnect.de  xx.xx.xx.xx = <???>


 Can you include the line from conn.log for one of these connections?

-- 
Ticket URL: <http://tracker.bro.org/bro/ticket/1022#comment:2>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker