[Bro] conn.log history has letter 'Q'?

[Seth Hall]

> On Aug 19, 2015, at 10:59 PM, James Lay <jlay at slave-tothe-box.net> wrote:
> 
> That's interesting..I don't have Q at all....and I would agree that maybe that should be documented somewhere, but I couldn't find it here:

To make it worse, there is also ‘I’ which indicates fin/rst (and possibly other flags).  James, would you mind filing a ticket about adding Q/I to the docs? (he who brings up docs files the ticket!)

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/