From 65ab987eb609dd9da40a1f896cc70e32cbc66501 Mon Sep 17 00:00:00 2001 From: Vicente Jimenez Aguilar Date: Sat, 25 Oct 2014 11:52:17 +0200 Subject: [PATCH] Wrong port in scripting documentation HTTP is port 80 not 53 --- doc/scripting/index.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/scripting/index.rst b/doc/scripting/index.rst index 559e131b8f..d18f87ac38 100644 --- a/doc/scripting/index.rst +++ b/doc/scripting/index.rst @@ -260,7 +260,7 @@ originating host is referenced by ``c$id$orig_h`` which if given a narrative relates to ``orig_h`` which is a member of ``id`` which is a member of the data structure referred to as ``c`` that was passed into the event handler. Given that the responder port -``c$id$resp_p`` is ``53/tcp``, it's likely that Bro's base HTTP scripts +``c$id$resp_p`` is ``80/tcp``, it's likely that Bro's base HTTP scripts can further populate the connection record. Let's load the ``base/protocols/http`` scripts and check the output of our script.