securityonion-web-page: add DNS IXFR query #498

Closed
GoogleCodeExporter opened this Issue Mar 24, 2015 · 1 comment

Comments

Projects
None yet
1 participant
add:
class=BRO_DNS proto="tcp" "ixfr" groupby:srcip

or replace existing with:
class=BRO_DNS proto="tcp" "axfr" OR "ixfr" groupby:srcip

Original issue reported on code.google.com by doug.bu...@gmail.com on 5 Mar 2014 at 7:43

Published:
http://blog.securityonion.net/2014/03/new-securityonion-web-page-package.html

Original comment by doug.bu...@gmail.com on 10 Mar 2014 at 11:23

  • Changed state: Verified
  • Added labels: ****
  • Removed labels: ****
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment