[Bro] id.orig_h and id.resp_h fields.

abdulrahman musallam abdulrahmanmusallam at gmail.com
Sun Dec 11 12:17:53 PST 2016


hi,
i've noticed that in conn.log under id.orig_h and id.resp_h fields it does
not show a normal IPv4 address insted i get somthing similar to this ff02::fb
or this fe80::219:e3ff:fee7:5d23
can anyone  please explain what do these IDs mean?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161211/0a234b07/attachment.html 


More information about the Bro mailing list