[Bro] TEREDO bug

Siwek, Jonathan Luke jsiwek at illinois.edu
Mon Oct 1 13:29:50 PDT 2012


> I don't think  TEREDO is working correctly.  It is filling up the  known_services.log with entries for local host ports that I know are closed just because there was a TEREDO packet sent to that port. 


It's not so much Teredo working incorrectly as it is the combination of how it works with the way known-services.bro decides something is a service, which could be improved.

I've created a ticket to track the issue: http://tracker.bro-ids.org/bro/ticket/890

    Jon



More information about the Bro mailing list