[Bro] Can bro be act as an IPS?

Kyle Cosmo mazequest at hotmail.com
Tue Mar 11 05:15:08 PDT 2008

That still doesn't make Bro an IPS though. An IPS blocks 
malicious traffic itself. Reconfiguring a nearby router after 
the original malicious traffic went through doesn't do any good
if the goal is to stop the initial malicious session. It is useful though...
especially for machines infected with worms that generate a lot of traffic.


> Hi,
> starting with:
> http://www.bro-ids.org/bro-workshop-2007/slides/Bro-IPS.pdf
> Regards
> Rmkml
> On Tue, 11 Mar 2008, wengwenxiang wrote:
> > Date: Tue, 11 Mar 2008 10:35:02 +0800
> > From: wengwenxiang <wwxxmu at hotmail.com>
> > To: bro at bro-ids.org
> > Subject: [Bro] Can bro be act as an IPS?

Shed those extra pounds with MSN and The Biggest Loser!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20080311/42a68845/attachment.html 

More information about the Bro mailing list