[Bro] Fwd: Flow Statistics in BRO

Vern Paxson vern at icir.org
Wed Oct 10 21:12:16 PDT 2007


> Also as an aside, do you know why there are these weird addresses in the
> scan.bro file because whenever I run bro -r tracefile tcp it always starts
> with the following lines:
> 
> /usr/local/bro/policy/scan.bro, line 92: warning: no such host:
> j5004.inktomisearch.com

These are historical (they used to actually make good examples!, but
those hosts have now gone away).  They were recently removed, however -
are you using the CURRENT release?

		Vern



More information about the Bro mailing list