[Bro] How to configure Bro to detect UDP port 53

[Qinwen Hu]

Hi all,

I am a new Bro user, I did few experiments to read the same DNS trace file
via Bro online version and Bro from my personal PC. The version number is
2.3.1.

I got some interesting results. the online version checks UDP port 53 5353
and 5355
id.resp_p  proto   trans_id  query
5353         UDP



But, the one on my PC only checks port 5353 and 5355.




Is this a configuration issue? And is there a way that I can configure my
Bro to check port 53?


Thanks

Steven

-- 

胡勤文／Qinwen Hu

Ph.D. Candidate, Computer Science, University of Auckland
奥克兰大学  计算机科学 博士研究生
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150129/ae3917a5/attachment-0001.html