[Bro] A little more confusion with Intel

Vern Paxson vern at corelight.com
Fri Feb 2 10:57:09 PST 2018


> I think EFFECTIVE_DOMAIN is better and 
> it matches the function being called in the domain-tld package.

FWIW, sometimes the term "registered domain" is used for this.

		Vern


More information about the Bro mailing list