[Bro] Off-line analysis
shonx001 at umn.edu
Sun Dec 5 17:58:05 PST 2004
Anyway, I will try to follow Vern's advice.
If you get some other brilliant idea, please let me know!
On 5 Dec 2004, john mcnicholas wrote:
> > Anyhow, what I really want to know is to do some ID attack ananlsys
> > If you have experienced such things with Bro, please let me know.
> > I get some tcpdump raw file, but it is not easy to handle Bro for
> > test.
> I'll gladly try to help once I figure out my nagging issues. Hopefully
> will be before Tuesday.
More information about the Bro