[Bro] connection_established for udp

[Robin Sommer]

On Tue, Apr 16, 2013 at 18:03 -0400, you wrote:

> Is there an equivalent of event connection_established for UDP?
>  I.e., an event that is raised once datagrams are seen in both
>  directions for a given 4-tuple.

No, and I wouldn't be sure about the semantics of seeing something in
both direction as that's not required for UDP. What are you trying to
do?

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 *     robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 * www.icir.org/robin