Jimmy Jones created BIT-1251:
--------------------------------
Summary: content_gap not being raised
Key: BIT-1251
URL: https://bro-tracker.atlassian.net/browse/BIT-1251
Project: Bro Issue Tracker
Issue Type: Problem
Components: Bro
Affects Versions: git/master
Environment: Fedora 20
Reporter: Jimmy Jones
Attachments: analyser.bro, test5-10mb.pcap.gz
Using the attached bro script, I extract out the http response, which contains
some null padding for the missing packets. However the content_gap event never
gets raised, despite http_entity_data not receiving the entire download.
--
This message was sent by Atlassian JIRA
(v6.4-OD-04-006#64001)
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev