[Bro] Traffic analysis by Bro

Vern Paxson vern at icir.org
Fri Nov 10 09:16:03 PST 2006

> There's always only one pcap filter in use. 

(Nit: there can be two, if you use Bro's "secondary filter" capability,
which is designed to provide a lightweight, additional packet stream to
supplement the main analysis.)


More information about the Bro mailing list