Hi,
I was wondering whether the Portmapper code can/will activate the NFS
analyzer for dynamically negotiated NFS ports. Looking at portmap.bro
and nfs.bro I don't see anything along those lines, but I would have
expected it. Am I missing something or is this something that bro can't do?
cu
gregor
I don't think it does, but it should be possible to add that in a
similar way as FTP data connections are handed on to the file
analyzer.
Robin
I don't think it does, but it should be possible to add that in a
similar way as FTP data connections are handed on to the file
analyzer.
I believe that's right (both points).
Vern