[Bro] Detecting software components that do strange dns queries

[Heine Lysemose]

I saw this the other day on Twitter,
https://github.com/sethhall/bro-domain-generation, but that still doesn't
answer your original question.

/Lysemose


On Fri, Mar 22, 2013 at 8:32 AM, C. L. Martinez <carlopmart at gmail.com>wrote:

> On Thu, Mar 21, 2013 at 9:36 PM, Tritium Cat <tritium.cat at gmail.com>
> wrote:
> > Character frequency analysis.
> >
> >
> >
>
> Do you mean
> https://www.google.es/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&ved=0CDAQFjAA&url=http%3A%2F%2Farxiv.org%2Fpdf%2F1004.4358&ei=eQFMUcnUGsamhAfDzYGoAQ&usg=AFQjCNG7i1H_2CSKH5k11Z44zOg6sLAQgA&bvm=bv.44158598,d.ZG4
> ??
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130322/81fa0ba6/attachment.html