[Bro] Some results from basic testing of bro-1.4prerelease.
Vern Paxson
vern at icir.org
Tue Sep 16 11:10:14 PDT 2008
> > As weird events are generally considered traffic that "should never
> > happen",shouldn't both versions signal approximately the same number
> > of weird events?
>
> Generally, yes, though there might be changes which change how
> things are interpreted
Also, there have been some bug fixes that previously led to inappropriate
Weird's.
Vern
More information about the Bro
mailing list