[Bro] Bro's evolutions
jp.luiggi at free.fr
Tue Sep 12 07:43:26 PDT 2006
On Fri, Sep 08, 2006 at 04:07:32PM -0700, Jim Mellander wrote:
> LBL is running a netflow -> bro conversion package for internal
> monitoring. In brief, we collect netflow records, parse them into Bro
> events, which are sent to a running Bro via the Brocolli library. If
> you're interested in working with this, great - it some help,as its a
> bit of a hack. I'll be happy to share what I'm doing...
Thank you for this information, i'll be happy using your software as it's
exactly what i was looking for.
> Jean-Philippe Luiggi wrote:
> > Hello All,
> > Several things :
> > While i just sent a mail to Vern last week asking about the
> > availability of the svn repository, i too agree with Christian,
> > this access can bring its batch of problems so ...
> > Another subject we spoke a few months ago (if not a year) : "Netflow"
> > Let's imagine we would like having this used in "Bro", how doing this ?
More information about the Bro