[Bro] How filter machine name registration?
Vito Logrillo
vitologrillo at gmail.com
Thu Oct 23 05:16:06 PDT 2014
Hi,
i want to filter machine name registration on 137/udp port: as you know,
all traffic is based on NetBios protocol.
I've saw bro source code and seems that the traffic on this port is managed
by dns analyzer and not directly by Netbios analyzer.
How can i filter netbios name service registration?
Regards,
Vito
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20141023/afb805e4/attachment.html
More information about the Bro
mailing list