Question about http.log and conn.log.

Zeek
1

Hi All

I have two questions about http.log and conn.log.

(1)Why do some UID in http.log not correspond to conn.log UID?

(2)Why may one conn.log UID correspond to many flows in HTTP.log?

Thanks ~