[Bro] Some results from basic testing of bro-1.4prerelease.

Vern Paxson vern at icir.org
Tue Sep 16 11:10:14 PDT 2008


> > As weird events are generally considered traffic that "should never
> > happen",shouldn't both versions signal approximately the same number
> > of weird events?
> 
> Generally, yes, though there might be changes which change how
> things are interpreted

Also, there have been some bug fixes that previously led to inappropriate
Weird's.

		Vern



More information about the Bro mailing list