[Bro] File Extraction wierdness

[Seth Hall]

> On Feb 10, 2016, at 12:36 PM, Blake Mackey <Blake.Mackey at rmc.ca> wrote:
> 
> Is the format in this trace somehow preventing proper reassembly with Bro?

There are a number of things that could be causing the trouble.  You can send me some traffic off list again if you'd like me to take a look at it.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/