sooshie/bro-scripts — pull request #4 by theflakes (2014-12-03 04:02:13+00:00)
Title: Updates for Bro 2.3

## Brian Kellogg 12/2/2014
## Updated for Bro 2.3 - DNS::do_reply is now a hook not an event,
## Added logic to check for conn$dns field before looking for conn$dns$query field - if ((c?$dns) && (c$dns?$query))