[Bro] looking for bro script

Greg Kosinovsky kosinovsky1 at llnl.gov
Thu Nov 5 15:21:28 PST 2009

Basically I mean collects and orders the packets from the same flow 
(such as an http session, but not limited to any particular protocol).

Thank you.


At 06:22 AM 11/5/2009, Vern Paxson wrote:
> > Is there an existing bro script that sessionizes the incoming packet
> > flow but keeps all of the original packets associated with each
> > recognized session?
>I'm not following - what do you mean by "sessionizes"?
>                 Vern

More information about the Bro mailing list