[Bro] binpac exception: out_of_bound: SSLRecord:rec: 41702 > 1350

[fatema bannatwala]

Hi Everyone,

Looking at weird.log file recently showed a lot of weird notices logged for
the bicpac exception: out_of_bound, specifically for SSLRecord.
Hence wanted to ask if these can be safely ignored, or if anything is
broken and there are some serious issues with the traffic Bro is seeing. :)

Here are some of the notices from weird.log:

2018-04-17T09:01:56-0400        CyVf0j1M4RughxzHt4      128.4.61.1
52113   64.15.123.22    443     binpac exception: out_of_bound:
SSLRecord:rec: 48205 > 1350     -       F       worker-3-6
2018-04-17T09:01:56-0400        CyVf0j1M4RughxzHt4      128.4.61.1
52113   64.15.123.22    443     binpac exception: out_of_bound:
SSLRecord:rec: 36586 > 1350     -       F       worker-3-6
2018-04-17T09:02:02-0400        CZlYI32EvsHn4OX81l      128.175.252.224
54493   64.15.123.22    443     binpac exception: out_of_bound:
SSLRecord:rec: 17689 > 1350     -       F       worker-3-7
2018-04-17T09:02:02-0400        CZlYI32EvsHn4OX81l      128.175.252.224
54493   64.15.123.22    443     binpac exception: out_of_bound:
SSLRecord:rec: 34801 > 1350     -       F       worker-3-7
2018-04-17T09:02:03-0400        Cxl308dWBQAhdAuvf       128.4.95.167
61457   64.15.123.23    443     binpac exception: out_of_bound:
SSLRecord:rec: 63514 > 1350     -       F       worker-1-1
2018-04-17T09:02:03-0400        Cxl308dWBQAhdAuvf       128.4.95.167
61457   64.15.123.23    443     binpac exception: out_of_bound:
SSLRecord:rec: 4143 > 1350      -       F       worker-1-1
2018-04-17T09:02:16-0400        Cn3rHuB9LlM3YfTd1       128.4.62.54
 65054   173.194.205.189 443     binpac exception: out_of_bound:
SSLRecord:rec: 13126 > 1350     -       F       worker-2-19
2018-04-17T09:02:16-0400        Cn3rHuB9LlM3YfTd1       128.4.62.54
 65054   173.194.205.189 443     binpac exception: out_of_bound:
SSLRecord:rec: 13126 > 1261     -       F       worker-2-19
2018-04-17T09:02:16-0400        Cn3rHuB9LlM3YfTd1       128.4.62.54
 65054   173.194.205.189 443     binpac exception: out_of_bound:
SSLRecord:rec: 63719 > 41       -       F       worker-2-19
2018-04-17T09:02:16-0400        Cn3rHuB9LlM3YfTd1       128.4.62.54
 65054   173.194.205.189 443     binpac exception: out_of_bound:
SSLRecord:rec: 17744 > 35       -       F       worker-2-19
2018-04-17T09:02:17-0400        Cn3rHuB9LlM3YfTd1       128.4.62.54
 65054   173.194.205.189 443     binpac exception: out_of_bound:
SSLRecord:rec: 64155 > 38       -       F       worker-2-19
2018-04-17T09:02:17-0400        Cn3rHuB9LlM3YfTd1       128.4.62.54
 65054   173.194.205.189 443     binpac exception: out_of_bound:
SSLRecord:rec: 54546 > 41       -       F       worker-2-19

Appreciate any insights. :)

Thanks!
Fatema.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180417/bc453d02/attachment.html