Jon Siwek 9b12967d40 Improve gap reporting in TCP connections that never see data. ... The previous behavior was to accomodate SYN/FIN/RST-filtered traces by not reporting missing data (via the content_gap event) for such connections. The new behavior always reports gaps for connections that are established and terminate normally, but sequence numbers indicate that all data packets of the connection were missed. The behavior can be reverted by redef'ing "detect_filtered_trace".		2014-01-24 16:21:02 -06:00
..
files	Add more script package README files	2013-10-23 16:36:14 -05:00
frameworks	Merge remote-tracking branch 'origin/topic/jazoff/notice_file_info'	2014-01-20 12:01:44 -08:00
misc	Add UDP support to the checksum offload detection script.	2013-10-24 15:21:03 -04:00
protocols	Tweak to SMTP script to adjust for new string slicing behaviour.	2013-12-04 13:45:46 -08:00
utils	Return the Dir module to file name tracking instead of inode tracking.	2013-10-29 11:09:55 -04:00
init-bare.bro	Improve gap reporting in TCP connections that never see data.	2014-01-24 16:21:02 -06:00
init-default.bro	Fix typos and formatting in init-bare.bro and init-default.bro	2013-10-20 01:32:17 -05:00