[Bro] Using BRO for measuring TCP flow bandwidth
hsbedi at memphis.edu
Thu Aug 12 09:51:03 PDT 2010
Thank you for your prompt assistance Justin. I will look into this.
On Thu, Aug 12, 2010 at 8:13 AM, Justin Azoff <JAzoff at uamail.albany.edu>wrote:
> On Wed, Aug 11, 2010 at 11:18:36PM -0400, Harkeerat Bedi wrote:
> > Part of my project now requires to also capture the network bandwidth
> > being utilized by a flow that passes thorough the BRO monitored
> > interface. By flow we mean, a source-destination IP pair.
> capstats(included with bro) can do this:
> capstats -I 5 -i eth0 -f 'host a.b.c.d and host e.f.g.h'
> -- Justin Azoff
> -- Network Security & Performance Analyst
> Bro mailing list
> bro at bro-ids.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro