[Bro-Dev] Bro DCE-RPC Analyzer Questions

Seth Hall seth at corelight.com
Wed Jan 31 11:22:17 PST 2018



On 31 Jan 2018, at 12:14, Fernandez, Mark I wrote:

> Am I close to the right answer for sending data to the at-svc parser?

Yep, I don't know the "best" answer, but I think you're on the right 
track with either direction that you outlined.  If that code just 
magically existed with either of your outlined implementations I don't 
think we could resist merging it in. ;)

   .Seth

--
Seth Hall * Corelight, Inc * www.corelight.com


More information about the bro-dev mailing list