[Bro] udp_request and icmp_sent event handlers
bchen at cs.ucf.edu
bchen at cs.ucf.edu
Mon May 9 14:18:40 PDT 2005
Hi Vern,
I can see that icmp_echo_request, icmp_reply, flow_summary and
icmp_unreachable event handlers work. But icmp_sent doesn't work. I just put
print statement in each of these handlers, only icmp_sent didn't print
anything. Any idea about this problem? thanks
Bing
>> How about the icmp_sent event handler? Should the icmp_sent event
>> handler see
>> all kinds of icmp packets?
>
> If you look in icmp.bro you'll see that it already sets a capture_filters
> entry, so yes, it should see all kinds of ICMP packets (at least, those
> for which the event engine generates events).
>
> Vern
>
More information about the Bro
mailing list