Hi, I’m new to bro.
I received tcp_contents (reassembled tcp payload) event with broccoli.
But, bro doesn’t emit events over 1500 bytes. (approx.)
How can I receive event tcp_contents properly.
Bellow is my local.bro
Hi, I’m new to bro.
I received tcp_contents (reassembled tcp payload) event with broccoli.
But, bro doesn’t emit events over 1500 bytes. (approx.)
How can I receive event tcp_contents properly.
Bellow is my local.bro