[Bro-Dev] [JIRA] (BIT-1251) content_gap not being raised

Johanna Amann (JIRA) jira at bro-tracker.atlassian.net
Thu Oct 22 14:08:00 PDT 2015


     [ https://bro-tracker.atlassian.net/browse/BIT-1251?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Johanna Amann updated BIT-1251:
-------------------------------
    Resolution: Won't Fix
        Status: Closed  (was: Open)

Closing since this is current intended behavior and there is nothing to be done.

> content_gap not being raised
> ----------------------------
>
>                 Key: BIT-1251
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1251
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>    Affects Versions: git/master
>         Environment: Fedora 20
>            Reporter: Jimmy Jones
>         Attachments: analyser.bro, test5-10mb.pcap.gz
>
>
> Using the attached bro script, I extract out the http response, which contains some null padding for the missing packets. However the content_gap event never gets raised, despite http_entity_data not receiving the entire download.



--
This message was sent by Atlassian JIRA
(v7.0.0-OD-08-002#70107)


More information about the bro-dev mailing list