[Bro-Dev] [Bro-Commits] [git/bro] topic/jsiwek/socks-authentication: Refactor SOCKS5 user/pass authentication support. (961fd06)

Seth Hall seth at icir.org
Thu Feb 12 17:24:40 PST 2015


> On Feb 12, 2015, at 6:06 PM, Jonathan Siwek <jsiwek at ncsa.illinois.edu> wrote:
> 
> -event socks_login_reply%(c: connection, code: count%);
> +event socks_login_userpass_reply%(c: connection, code: count%);

Did you find evidence that SOCKS uses a different reply message for different login types?  When I was reading I thought that the same login reply message structure was used in response to any login type.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the bro-dev mailing list