[Bro] conn.log history has letter 'Q'?
James Lay
jlay at slave-tothe-box.net
Thu Aug 20 11:25:34 PDT 2015
LoL...I sure will Seth thanks.
Sent from my iPhone
> On Aug 20, 2015, at 10:44, Seth Hall <seth at icir.org> wrote:
>
>
>> On Aug 19, 2015, at 10:59 PM, James Lay <jlay at slave-tothe-box.net> wrote:
>>
>> That's interesting..I don't have Q at all....and I would agree that maybe that should be documented somewhere, but I couldn't find it here:
>
> To make it worse, there is also ‘I’ which indicates fin/rst (and possibly other flags). James, would you mind filing a ticket about adding Q/I to the docs? (he who brings up docs files the ticket!)
>
> .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
More information about the Bro
mailing list