#911: SRV replies don't get processed by DNS analyzer
---------------------+------------------------
Reporter: vern | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone: Bro2.2
Component: Bro | Version: git/master
Keywords: |
---------------------+------------------------
The event engine doesn't appear to generate {{{dns_SRV_reply}}} in some
cases, as indicated by running on the attached trace. I've tried this
with both the default DNS analysis and my own custom analysis (that uses
-b to not run other stuff) and have confirmed that the reply event isn't
getting generated, even though there aren't any checksum issues or such.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/911>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev