From fdf36393baae87a8371d4e2cfc46d0ad92cf4798 Mon Sep 17 00:00:00 2001 From: Johanna Amann Date: Tue, 1 Mar 2016 14:08:58 -0800 Subject: [PATCH] Update documentation for RSTR. Addresses BIT-1535 --- scripts/base/protocols/conn/main.bro | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/base/protocols/conn/main.bro b/scripts/base/protocols/conn/main.bro index 015c5520db..c6eef5d2d5 100644 --- a/scripts/base/protocols/conn/main.bro +++ b/scripts/base/protocols/conn/main.bro @@ -47,7 +47,7 @@ export { ## S2 Connection established and close attempt by originator seen (but no reply from responder). ## S3 Connection established and close attempt by responder seen (but no reply from originator). ## RSTO Connection established, originator aborted (sent a RST). - ## RSTR Established, responder aborted. + ## RSTR Responder sent a RST. ## RSTOS0 Originator sent a SYN followed by a RST, we never saw a SYN-ACK from the responder. ## RSTRH Responder sent a SYN ACK followed by a RST, we never saw a SYN from the (purported) originator. ## SH Originator sent a SYN followed by a FIN, we never saw a SYN ACK from the responder (hence the connection was "half" open).