piping to a text file
bpatters at fit.edu
Thu Apr 1 08:13:08 PST 2004
> The binary file is in tcpdump format, so you can use tcpdump -r <file> to
> see the trace in text format (try flag -nX).
Where does the '-nX' flag go? tcpdump or bro? Does it go in place of the
'-r' or appended to it?
> Also if you say 'bro ... -w
> -', the output trace will be dumped to stdout and you can pipe it with
> tcpdump as well.
>From the following line...
>#bro -r <trace file> mt -w <output file>
How do I do what you are saying above so that I can read the data in a
text reader (vi,gedit,emacs...)?
I am running a bash shell on Fedora/Redhat.
Sorry, I have only been "officially" running Linux for a few months.
> Does this answer your question? (I don't know what you meant by "as-is"
When I said "as-is" I just meant that I didn't want bro to analyze the
data, just repeat it back.
More information about the Bro