[Bro] modifying bro.init

Justin Azoff JAzoff at uamail.albany.edu
Thu Feb 4 07:23:36 PST 2010


On Thu, Feb 04, 2010 at 10:00:43AM -0500, Seth Hall wrote:
> > ignore_checksum=T will cause it to analyze the bad packet, so if  
> 
> I left off the rest of my explanation for that statement. :)  It seems  
> like almost everyone eventually runs Bro against a tracefile that was  
> captured on a NIC doing checksum offloading.

Is that the same as using the -C option:

-C|--no-checksums              | ignore checksums

-- 
-- Justin Azoff
-- Security & Network Performance Analyst



More information about the Bro mailing list