[Bro] FTP data connections

Christian Novello christian.novello at gmail.com
Tue Feb 20 03:16:25 PST 2007

I'm using bro to analyze ftp sessions and I want identify ftp data connections.

If the ftp session is in active mode, in ftp log file there is any
line that indicate a ftp data connection instead in connection log
file there is.
Instead in passive mode there are any lines both in ftp log file and
connection log file.

Are there any istructions that must be enable to print information
about data connections in ftp log file?


Christian Novello

More information about the Bro mailing list