[Bro-Dev] [Bro-Commits] [git/bro] topic/jsiwek/socks-authentication: Refactor SOCKS5 user/pass authentication support. (961fd06)
Seth Hall
seth at icir.org
Thu Feb 12 17:24:40 PST 2015
> On Feb 12, 2015, at 6:06 PM, Jonathan Siwek <jsiwek at ncsa.illinois.edu> wrote:
>
> -event socks_login_reply%(c: connection, code: count%);
> +event socks_login_userpass_reply%(c: connection, code: count%);
Did you find evidence that SOCKS uses a different reply message for different login types? When I was reading I thought that the same login reply message structure was used in response to any login type.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
More information about the bro-dev
mailing list