[Bro] Specification of log fields
Siwek, Jonathan Luke
jsiwek at illinois.edu
Wed Sep 4 11:00:35 PDT 2013
> I need to find the exact meaning of each field of log files. For example, "duration is in seconds, miliseconds...?", "difference between orig_bytes and orig_ip_bytes" and so on.
You can usually find descriptions if you browse the script reference documentation like at . Generally, for fields of type "interval" (like "duration"), the unit is seconds.
More information about the Bro