On Nov 11, 2012, at 12:36 PM, Scott Campbell <[email protected]> wrote:
> We are running (git current) at SC this year and have a good mix of v4 > and v6 traffic. I am seeing excellent coverage of both protocols for > everything but software.log - in that case there are no v6 records. > Is this a known issue? If not, I will open a ticket. Do you have the "local" IPv6 address space configured in Site::local_nets or networks.cfg (if running BroControl)? By default, the software framework only tracks local software. .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro-ids.org/ _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
