I'm working from latest git. It seems that dns.bro is only logging to
the DNS log on connection_state_remove().
dns$ready is never set to T .. what is the following if supposed to be
doing? dns$total answers == 0 here.
if ( c$dns?$answers && c$dns?$total_answers &&
|c$dns$answers| == c$dns$total_answers )
{
add c$dns_state$finished_answers[c$dns$trans_id];
# Indicate this request/reply pair is ready to be logged.
c$dns$ready = T;
}
}
Cheers,
Matt
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev