[Bro] Problem with connections in S1 and SF state

[Jan Grashöfer]

Hi Sven,

> that sounds very promising! Could you please tell me what setup you
> used? (OS/Distribution, bro version, command to playback the pcap file?)

I tried that on Fedora 23 with a recent Bro master. To playback I used:
# tcpreplay -t -i <interface> <pcap-file>
I am using Open vSwitch for my virtual testing network and utilized the
OVS monitoring interface I created in this context for replaying the
traffic.

Best regards,
Jan