[Bro] conn.log history has letter 'Q'?

James Lay jlay at slave-tothe-box.net
Thu Aug 20 11:25:34 PDT 2015


LoL...I sure will Seth thanks.

Sent from my iPhone

> On Aug 20, 2015, at 10:44, Seth Hall <seth at icir.org> wrote:
> 
> 
>> On Aug 19, 2015, at 10:59 PM, James Lay <jlay at slave-tothe-box.net> wrote:
>> 
>> That's interesting..I don't have Q at all....and I would agree that maybe that should be documented somewhere, but I couldn't find it here:
> 
> To make it worse, there is also ‘I’ which indicates fin/rst (and possibly other flags).  James, would you mind filing a ticket about adding Q/I to the docs? (he who brings up docs files the ticket!)
> 
>  .Seth
> 
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/



More information about the Bro mailing list