[Bro] RSS and packet reordering
seth at icir.org
Tue Aug 26 07:55:32 PDT 2014
On Aug 26, 2014, at 10:45 AM, Jesse Bowling <jessebowling at gmail.com> wrote:
> Interesting! Will this tool be flexible enough to also feed packets to other programs on the same box such as argus, snort, etc?
Yep, that was a specific design requirement. It uses the newish netmap feature "pipes" to give you specially named interfaces that you can open in anything using the netmap libpcap support.
International Computer Science Institute
(Bro) because everyone has a network
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140826/2e591aa3/attachment.bin
More information about the Bro