[Bro] Newb with a couple questions

Seth Hall seth at icir.org
Wed Mar 13 17:33:04 PDT 2013

On Mar 13, 2013, at 5:13 PM, James Lay <jlay at slave-tothe-box.net> wrote:

> But that seems to point to filtering columns, and not protocols.  
> Thanks for any insight.

I wrote a blog post about log filtering a while ago that should help you out:

Does that help?


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list