[Bro] connection states

Vlad Grigorescu vladg at cmu.edu
Sun Jul 21 06:11:44 PDT 2013


Wow, a 17 line sig for a 2 line e-mail. That might be a new record.

  --Vlad


On Jul 21, 2013, at 5:36 AM, Ron Jenkins <rjenkins at rmjconsulting.net> wrote:

> I too would be interested in knowing. 
> 
> 
> Thanks
> 
> Ron Jenkins (SnortCP,VCP 3 / 4,MCNE,MCPS,MCNPS,CCNA)
> RMJ Consulting, LLC.
> "Bringing Companies and Solutions Together"
> Owner / Senior Architect
> Physical Address
> 11715 Bricksome Ave STE B-7
> Baton Rouge, LA 70816
> Mail Address
> 7575 Jefferson Hwy #103
> Baton Rouge, LA 70806
> Toll. 855-448-5214
> Direct. 225-448-5214
> Fax. 225-448-5324
> Cell. 225-931-1632
> Email. rjenkins at rmjconsulting.net
> Web. http://www.rmjconsulting.net<http://www.rmjconsulting.net/>
> http://www.linkedin.com/in/ronmjenkins
> 
> On Jul 21, 2013, at 1:14 AM, "Laleh Arshadi" <la_arshadi at yahoo.com> wrote:
> 
>> Dear all,
>>  
>> Seems that Bro classifies connections into a number of states in its "connection summaries" log files. States such SF, REJ, etc. upon which it then classifies the connection into one of the three states "good", "bad' or "unkown". I was wondering if one could give me a direct pointer to a reference in which these states are discussed thoroughly.
>>  
>> Regards
>> L. Arshadi
>> _______________________________________________
>> Bro mailing list
>> bro at bro-ids.org
>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro





More information about the Bro mailing list