[Bro] How to do with Bro 2.1

Seth Hall seth at icir.org
Sat Oct 6 20:08:35 PDT 2012


On Oct 6, 2012, at 11:55 AM, keqhe at cs.wisc.edu wrote:

> Hello, sorry to disturb you again. Do you know is there any document guiding
> users to make http or https's identification just based on port number.


Here's a script that does what you want…

	https://github.com/sethhall/bro-scripts/blob/master/conn-port-service.bro

 .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/





More information about the Bro mailing list