[Bro-Dev] [JIRA] (BIT-76) Low port trolling vs. backscatter

[Seth Hall (JIRA)]

     [ https://bro-tracker.atlassian.net/browse/BIT-76?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Seth Hall updated BIT-76:
-------------------------
    Attachment: signature.asc


Agreed on both points.  No priority on it.  I just wanted to document it since it was something I noticed. :)


> Low port trolling vs. backscatter
> ---------------------------------
>
>                 Key: BIT-76
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-76
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>            Reporter: Vern Paxson
>            Priority: Low
>              Labels: scan
>         Attachments: backscatter.trace, signature.asc
>
>
> Running on the attached trace, mt.bro correctly diagnoses backscatter, but then goes on to later complain about low-port trolling.  Seems this latter should be suppressed, as it's just a follow-on from the backscatter.



--
This message was sent by Atlassian JIRA
(v6.3-OD-06-017#6327)