[Bro] Protocol Detection/Decoding

Robin Sommer sommer at in.tum.de
Mon Jul 25 02:38:22 PDT 2005


On Tue, Jul 19, 2005 at 17:16 -0400, Adayadil Thomas wrote:

> Does Bro do protocol detection and decoding ? .. HTTP/FTP/any other/ 
> detection when web server/ftpserver/any server/ is running on a non
> standard port ?

Not yet, but we're working on it. It may take us a bit though until
this is ready for productional use as it requires significant
internal changes. 

(Doing just *detection* is rather easy using signatures; the
*decoding* part is the tricky one). 

Robin

-- 
Robin Sommer * Room        01.08.055 * www.net.in.tum.de
TU Muenchen  * Phone (089) 289-18006 *  sommer at in.tum.de 



More information about the Bro mailing list