[Bro-Dev] [JIRA] (BIT-1370) SIP Analyzer

Aashish Sharma (JIRA) jira at bro-tracker.atlassian.net
Fri Apr 3 11:19:02 PDT 2015

    [ https://bro-tracker.atlassian.net/browse/BIT-1370?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20222#comment-20222 ] 

Aashish Sharma commented on BIT-1370:

I've been running vlad's branch (2443d319112fd345878766618951c56c2fd65fbd) for a long while and for all practical purposes, its been running stable and blocking sip scanners and logging sip sessions. 

There are a couple unknown_SIP_method (SUBSCRIBE and  NOTIFY) in weird logs.  I will send vlad pcaps for these specific ones. At present, I don't know if these are affecting anything per se. 

> SIP Analyzer
> ------------
>                 Key: BIT-1370
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1370
>             Project: Bro Issue Tracker
>          Issue Type: New Feature
>          Components: Bro
>    Affects Versions: 2.4
>            Reporter: Vlad Grigorescu
>            Assignee: Vlad Grigorescu
> topic/vladg/sip has a SIP analyzer.

This message was sent by Atlassian JIRA

More information about the bro-dev mailing list