[Bro] How filter machine name registration?

Vito Logrillo vitologrillo at gmail.com
Thu Oct 23 05:16:06 PDT 2014


Hi,
i want to filter machine name registration on 137/udp port: as you know,
all traffic is based on NetBios protocol.
I've saw bro source code and seems that the traffic on this port is managed
by dns analyzer and not directly by Netbios analyzer.
How can i filter netbios name service registration?
Regards,
Vito
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20141023/afb805e4/attachment.html 


More information about the Bro mailing list