[Bro] Does bro REALLY SUPPORT port-independent analysis of application-layer protocols?

Seth Hall seth at icir.org
Tue May 20 05:15:45 PDT 2014

On May 20, 2014, at 1:42 AM, (peter) <45070198 at qq.com> wrote:

> How could I configure it for detecting socks, which use other port?

It should work.  If it's not you need to provide a packet capture that shows it not working.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list