[Bro] Meaning of Various Acronyms in State Field of Packet

Lionel Levy lionellevy25 at gmail.com
Thu Sep 13 06:34:17 PDT 2018


Hi All,

I am looking at a dataset of features that was generated using Bro-IDS.
 Can someone please explain the meaning of the various acronyms that could
be sent in a state field?  I can guess some of them.

CON    ....      Connected?
 FIN    ......      Finished?
 TIM   .......      ??
 ECO  .......     ??
 INT   ........     Interrupted?
 RST  ........     Reset?
 ECR  .........   Echo Reply?
 URP  .......      ??
 CLO  ........      ??
  STA  ........      ??
  ACC .........     ??

Thanks much,

Lionel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180913/bcd76b89/attachment.html 


More information about the Bro mailing list