[Bro] udp_reply event instead of supposed udp_request event

[Christian Kreibich]

On Fri, 2005-02-11 at 14:35 +0000, Christoph Göldi wrote:
> the same behavior with sending port 111 and port 123 instead of port 53.

Indeed, as you'll find if you look at the code I pointed out: those are
assumed to be the Portmapper and NTP.

Cheers,
Christian.
-- 
________________________________________________________________________
                                          http://www.cl.cam.ac.uk/~cpk25
                                                    http://www.whoop.org