[Bro] Does bro REALLY SUPPORT port-independent analysis of application-layer protocols?

[Seth Hall]

On May 20, 2014, at 1:42 AM, （peter） <45070198 at qq.com> wrote:

> How could I configure it for detecting socks, which use other port?

It should work.  If it's not you need to provide a packet capture that shows it not working.

 .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/