Jimmy Jones created BIT-1254:
--------------------------------
Summary: file analysis framework sometimes returns hashes despite
missing packets
Key: BIT-1254
URL: https://bro-tracker.atlassian.net/browse/BIT-1254
Project: Bro Issue Tracker
Issue Type: Problem
Components: Bro
Affects Versions: 2.3, git/master
Environment: CentOS 6
Reporter: Jimmy Jones
Attachments: sample-3streams-hole.pcap
Putting the attached sample (3 streams, each with missing packets) though the
file analysis framework, in files.log I see hashes for one streams but not the
other 2. Should I get any hashes if there are missing packets?
bro -r sample-3streams-hole.pcap frameworks/files/hash-all-files.bro
--
This message was sent by Atlassian JIRA
(v6.4-OD-05-008#64003)
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
