Happy new year!
I ran "bro -i eth0 mt", I get the output like below,the connection records to/from my host(10.1.2.233) can be correctly shown. While the connection between other hosts(also in my network) can not show all information, such as src_bytes and dst_bytes, instead of number it show "?".
Could anybody help me about this? Thanks.
1041604868.758042 3.79266 http 451 2395 218.28.2.42 10.1.2.233 SF X
1041604872.295685 1.86815 http 280 755 218.28.2.42 10.1.2.233 SF X
1041604881.820833 1.68025 http 599 1080 218.28.2.42 10.1.2.233 SF X
1041604883.506178 1.72534 http 349 1511 218.28.2.42 10.1.2.233 SF X
1041604588.107852 ? ftp ? ? 10.1.2.251 10.1.2.28 S0 X
~~~ ~~~~~
1041604885.235685 3.36285 http 496 25088 218.28.2.42 10.1.2.233 SF X
1041604888.655954 2.02467 http 282 755 218.28.2.42 10.1.2.233 SF X
1041604600.325944 ? http ? ? 10.1.2.168 10.1.201.128 S0 X
~~ ~~~~