[Bro] looking for bro script
kosinovsky1 at llnl.gov
Thu Nov 5 15:21:28 PST 2009
Basically I mean collects and orders the packets from the same flow
(such as an http session, but not limited to any particular protocol).
At 06:22 AM 11/5/2009, Vern Paxson wrote:
> > Is there an existing bro script that sessionizes the incoming packet
> > flow but keeps all of the original packets associated with each
> > recognized session?
>I'm not following - what do you mean by "sessionizes"?
More information about the Bro