[Bro] Questions about Bro's DNS Parser

Vern Paxson vern at icir.org
Tue Feb 9 14:36:29 PST 2010


> Just out of curiosity though, is this considered a bug in the current  
> release? Or is this something else?

A bug.  I don't think there's any plausible reason why such packets should
be skipped entirely; there's a flaw in the logic for processing them.

		Vern



More information about the Bro mailing list