[Bro] Detecting heartbleed activity

James Lay jlay at slave-tothe-box.net
Thu Apr 10 09:51:00 PDT 2014

On 2014-04-10 06:24, James Lay wrote:
> So...I'd like to be able to see if any heartbleed activity was
> happening before everyone knew about it. I'm thinking I'd see this in
> the conn.log with data leaving the server. Any thoughts or pointers 
> we
> could use to check? Thanks all.
>  James

Thanks for the feedback all..very helpful.


More information about the Bro mailing list