[Bro] modifying bro.init
Justin Azoff
JAzoff at uamail.albany.edu
Thu Feb 4 07:23:36 PST 2010
On Thu, Feb 04, 2010 at 10:00:43AM -0500, Seth Hall wrote:
> > ignore_checksum=T will cause it to analyze the bad packet, so if
>
> I left off the rest of my explanation for that statement. :) It seems
> like almost everyone eventually runs Bro against a tracefile that was
> captured on a NIC doing checksum offloading.
Is that the same as using the -C option:
-C|--no-checksums | ignore checksums
--
-- Justin Azoff
-- Security & Network Performance Analyst
More information about the Bro
mailing list