[Bro] Truncated DNS entries in reporting

JRH cryptowave at gmail.com
Sun Jan 24 20:24:45 PST 2010


Hi Folks,

In BRO reports, if a hostname (PTR lookup) exceeds a certain amount of
characters, it gets truncated. Is there an option to turn the PTR
lookup off?

I have looked at the documentation and even the code and I am stumped.

Thanks for any pointers ;)



More information about the Bro mailing list