[Bro] Does bro REALLY SUPPORT port-independent analysis of application-layer protocols?
seth at icir.org
Tue May 20 05:15:45 PDT 2014
On May 20, 2014, at 1:42 AM, （peter） <45070198 at qq.com> wrote:
> How could I configure it for detecting socks, which use other port?
It should work. If it's not you need to provide a packet capture that shows it not working.
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro