[Bro] HTTP Question

Jean-Philippe Luiggi jp.luiggi at free.fr
Fri Nov 9 10:55:58 PST 2007


Diogo Corteletti de Oliveira a écrit :
> Hello,
>
>             Can BRO alarm on non-http traffic over port 80?
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
>
>
>
>
> !DSPAM:1,47349958153933285824817!
>   
Hello Diogo,
I think so if you use DPD (dynamic protocol detection).
Please note there's already a file "detect-protocols.bro" which
is able to find connections with protocols on non-standard ports.

Best regards,

Jean-philippe




More information about the Bro mailing list