[Bro] Protocol Detection/Decoding
Robin Sommer
sommer at in.tum.de
Mon Jul 25 02:38:22 PDT 2005
On Tue, Jul 19, 2005 at 17:16 -0400, Adayadil Thomas wrote:
> Does Bro do protocol detection and decoding ? .. HTTP/FTP/any other/
> detection when web server/ftpserver/any server/ is running on a non
> standard port ?
Not yet, but we're working on it. It may take us a bit though until
this is ready for productional use as it requires significant
internal changes.
(Doing just *detection* is rather easy using signatures; the
*decoding* part is the tricky one).
Robin
--
Robin Sommer * Room 01.08.055 * www.net.in.tum.de
TU Muenchen * Phone (089) 289-18006 * sommer at in.tum.de
More information about the Bro
mailing list