I'm working from latest git. It seems that dns.bro is only logging to 
the DNS log on connection_state_remove().

dns$ready is never set to T .. what is the following if supposed to be 
doing? dns$total answers == 0 here.

     if ( c$dns?$answers && c$dns?$total_answers &&
          |c$dns$answers| == c$dns$total_answers )
       {
       add c$dns_state$finished_answers[c$dns$trans_id];
       # Indicate this request/reply pair is ready to be logged.
       c$dns$ready = T;
       }
     }

Cheers,
Matt
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

Reply via email to