[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24803#comment-24803
]
Justin Azoff commented on BIT-1545:
---
The other thing to keep in mind is how this affects missed_bytes and
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24802#comment-24802
]
Johanna Amann commented on BIT-1545:
Yes, that was pretty much the outcome of our discussion.
The SSH case
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24800#comment-24800
]
Vern Paxson commented on BIT-1545:
--
I'm definitely a fan of at least adding transparency that the value has
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Johanna Amann updated BIT-1545:
---
Resolution: Merged (was: Fixed)
Status: Closed (was: Merge Request)
> SSH connection not
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Johanna Amann updated BIT-1545:
---
Status: Merge Request (was: Open)
> SSH connection not recording entire flow correctly
>
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24705#comment-24705
]
Johanna Amann commented on BIT-1545:
I talked to Robin - and was mistaken, most of these cases are actually
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24704#comment-24704
]
Aaron Eppert commented on BIT-1545:
---
There may be an instance where completely disabling processing still
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24703#comment-24703
]
Johanna Amann commented on BIT-1545:
This actually is an interesting bug with a few larger implications. I
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24612#comment-24612
]
Aaron Eppert commented on BIT-1545:
---
https://github.com/bro/bro/pull/58
Is my proposal for dealing with this
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24610#comment-24610
]
Aaron Eppert edited comment on BIT-1545 at 3/4/16 8:38 PM:
---
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24611#comment-24611
]
Justin Azoff commented on BIT-1545:
---
Oh, right... I knew that option existed but I missed that the default
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24610#comment-24610
]
Aaron Eppert commented on BIT-1545:
---
{{SSH::skip_processing_after_detection}} defaults to T and is {{}}'able.
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Johanna Amann updated BIT-1545:
---
Fix Version/s: 2.5
> SSH connection not recording entire flow correctly
>
Jason Carr created BIT-1545:
---
Summary: SSH connection not recording entire flow correctly
Key: BIT-1545
URL: https://bro-tracker.atlassian.net/browse/BIT-1545
Project: Bro Issue Tracker
Issue
[
https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24608#comment-24608
]
Justin Azoff commented on BIT-1545:
---
I also realized it does the same thing on our standard ssh.pcap, so this
15 matches
Mail list logo