Tag Archives: how to use bro

Bro Logs Protocol Log Features Fields Description Cheat Sheet How To

State Meaning S0 Connection attempt seen, no reply S1 Connection established, not terminated (0 byte counts) SF Normal establish & termination (>0 byte counts) REJ Connection attempt rejected S2 Established, ORIG attempts close, no reply from RESP. S3 Established, RESP attempts close, no reply from ORIG. RSTO Established, ORIG aborted (RST) RSTR Established, RESP aborted… Read More »

Share Button