Connection summary <???> values

Zeek
1

Hello,

For the connection summary is there a way to reformat the way the notification looks – Like put each of these on their own line? Also is there way to make the <???> value show its domain name? The <???> value shows up in both the incoming, outgoing and total sections.

#1=<???> #2=(redacted) #3=<???>

#4= (redacted) #5= (redacted) #6= (redacted)

#7= (redacted) #8=<???> #9=<???>

#10= (redacted) #11=<???> #12= (redacted)

#13=<???> #14= (redacted) #15=<???>

#16= (redacted) #17=<???> #18=<???>

#19=<???> #20= (redacted)

Thanks,

Andrew Dellana

Intern

2

<???> simply means that DNS resolution failed.

Andrew Dellana <andrew.dellana@bayer.com> writes:

3

Thanks! Is there a way to resolve the DNS connection issues?

Freundliche Grüße / Best regards,

Andrew Dellana
Intern