[Bro] Bro as a fancy pcap filter
christian at whoop.org
Mon Nov 21 20:13:04 PST 2005
On Mon, 2005-11-21 at 19:04 -0800, Robin Sommer wrote:
> On Mon, Nov 21, 2005 at 21:15 -0500, Ruoming Pang wrote:
> > And you can imagine calling dump_packets_of_connection() in all kinds
> > of other events.
> Alternatively, and more fine-grained, there is
> global dump_current_packet: function(file_name: string): bool;
Nice! That's exactly what I need -- thanks a bunch guys.
More information about the Bro