[Bro] RSS and packet reordering

Seth Hall seth at icir.org
Tue Aug 26 07:55:32 PDT 2014

On Aug 26, 2014, at 10:45 AM, Jesse Bowling <jessebowling at gmail.com> wrote:

> Interesting! Will this tool be flexible enough to also feed packets to other programs on the same box such as argus, snort, etc?

Yep, that was a specific design requirement.  It uses the newish netmap feature "pipes" to give you specially named interfaces that you can open in anything using the netmap libpcap support.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140826/2e591aa3/attachment.bin 

More information about the Bro mailing list