Robin Sommer created BIT-1156:
---------------------------------
Summary: DNS analyzer parses TXT records imcompletely
Key: BIT-1156
URL: https://bro-tracker.atlassian.net/browse/BIT-1156
Project: Bro Issue Tracker
Issue Type: Problem
Components: Bro
Reporter: Robin Sommer
Fix For: 2.3
The payload of DNS TXT records can consist of multiple character strings but
the DNS analyzer parses out only the first. We should parse them out all and
then probably concatenate into a single string to pass to the event, separated
with semicolons or something.
I have a trace with an example but it would need anonymization before inclusion
into the test suite.
--
This message was sent by Atlassian JIRA
(v6.2-OD-10-004-WN#6253)
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
