[Bro] Fwd: Flow Statistics in BRO
Vern Paxson
vern at icir.org
Wed Oct 10 21:12:16 PDT 2007
> Also as an aside, do you know why there are these weird addresses in the
> scan.bro file because whenever I run bro -r tracefile tcp it always starts
> with the following lines:
>
> /usr/local/bro/policy/scan.bro, line 92: warning: no such host:
> j5004.inktomisearch.com
These are historical (they used to actually make good examples!, but
those hosts have now gone away). They were recently removed, however -
are you using the CURRENT release?
Vern
More information about the Bro
mailing list