[Bro] Howto set up specific filters
robin at icir.org
Tue Aug 14 18:12:52 PDT 2007
On Thu, Aug 09, 2007 at 09:39 -0500, David Caldwell wrote:
> How do I set up a specific filter in BRO? For example, I want to filter
> thinks like aim, irc, edonkey, bittorrent...etc.
Sorry, I'm not sure what you mean by "filter" here. Are you refering
to a packet filter, i.e., a BPF expression? Do you want to include,
irc etc. traffic or filter it out?
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org
LBNL/ICSI * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro