[Bro] Interesting observation with ssh on non-ssh port

[Seth Hall]

On Apr 2, 2014, at 4:11 PM, James Lay <jlay at slave-tothe-box.net> wrote:

> I absolutely did.  I was originally scp'ing a file, then started to test with ssh'ing to the host and exiting out.  Is there a way to debug this?  I think I even compiled it for debugging :)

You’re sure that your box was seeing the traffic you think it was?  Also, if this is on a real network you want to be careful with building with debugging enabled because it can cause a large performance hit which can then cause it’s own problems.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140402/ea25de3b/attachment.bin