On Sep 4, 2013, at 6:05 PM, "Siwek, Jonathan Luke" <[email protected]> wrote:
> This might be a significant leak since local.bro has the MHR and notary 
> scripts loaded by default now and those use TXT lookups.  Though, the leak is 
> when there's a request for something that's already cached locally, that 
> might happen often enough (same file/cert seen multiple times).


Nice find.  A large site that was having trouble on their workers is running 
that now.  We should find out pretty soon.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

Reply via email to