[Bro] Newb with a couple questions

[Seth Hall]

On Mar 14, 2013, at 9:21 AM, Ron Jenkins <rjenkins at rmjconsulting.net> wrote:

> Is the tunnel log on by default?


Yep.  2.1 automatically identifies and decapsulates Teredo, IP-in-IP (6to4, etc), AYIYA, GTP (further fixes to this are in git now), and SOCKS.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/