[Bro] bug in smtp analyzer?

erik clark philosnef at gmail.com
Wed Oct 19 05:14:50 PDT 2016

In 2.4.1, it seems that there is no c$smtp$cc field in the smtp analyzer,
but there is in 2.5. I noticed in 2.4.1, processing cc fields is haphazard
at best, and is totally unreliable. Is this really only fixed in 2.5 with
the addition of the cc processor for the smtp analyzer?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161019/6674dfe3/attachment.html 

More information about the Bro mailing list