[Bro] Protocol Violation with Google IPs

Robin Sommer robin at icir.org
Sun Jan 27 11:23:05 PST 2008


On Fri, Jan 25, 2008 at 10:47 -0300, you wrote:

>                    Anyone is having ProtocolViolation alarms with Google 
> IPs? Analizying the packet trace I've noticed that either GMAIL or 
> Google Talk is alerting Protocol Violation for the HTTP Analyzer.

I can look into it if you send me the trace (just the single
connection reported in the alarm please). 

Robin

-- 
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list