[Bro] udp_request and icmp_sent event handlers

Vern Paxson vern at icir.org
Sun May 8 22:39:21 PDT 2005


>     Thank you for your help. Yes, it works after I redef the capture_filters.

Great, glad to hear it.

> How about the icmp_sent event handler? Should the icmp_sent event handler see
> all kinds of icmp packets?

If you look in icmp.bro you'll see that it already sets a capture_filters
entry, so yes, it should see all kinds of ICMP packets (at least, those
for which the event engine generates events).

		Vern



More information about the Bro mailing list