dpd framework and DCE_RPC/NTLM analyzers

Palumbo Mauro <[email protected]>
Newsgroups gmane.comp.security.detection.bro
Message-ID <[email protected]>
Hi everybody,
   is there any particular reason why the  DCE_RPC/NTLM protocols are disabled by default in the DPD framework? (both protocols are in DPD::ignore_violations).

Thanks
Mauro

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.