[Bro] conn.log history has letter 'Q'?

Seth Hall seth at icir.org
Thu Aug 20 09:44:02 PDT 2015

> On Aug 19, 2015, at 10:59 PM, James Lay <jlay at slave-tothe-box.net> wrote:
> That's interesting..I don't have Q at all....and I would agree that maybe that should be documented somewhere, but I couldn't find it here:

To make it worse, there is also ‘I’ which indicates fin/rst (and possibly other flags).  James, would you mind filing a ticket about adding Q/I to the docs? (he who brings up docs files the ticket!)


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list