[Bro] Reading from a text file
robin at icir.org
Mon Apr 16 12:40:45 PDT 2012
On Sat, Apr 14, 2012 at 15:40 +0500, you wrote:
> Is there any way we can do it using Bro?
Not yet, but there will be soon. Bernhard Amann has developed a new
"input framework" that can feed external information into Bro both at
startup and also continuously during run-time. Currently, it can read
input from ASCII files and from PostgresSQL. There may be further
interfaces to other sources coming later.
This is actually pretty powerful for a range of applications, and
we're currently preparing the code for merging in. Assuming all goes
well, it will be part of Bro 2.1.
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro