[Bro] How filter machine name registration?
vitologrillo at gmail.com
Tue Oct 28 05:21:43 PDT 2014
thanks for your reply.
Without any change on source code, what event you suggest to use to handle
Also an event able to give me additional RRs as row data could be fine.
2014-10-28 13:13 GMT+01:00 Seth Hall <seth at icir.org>:
> On Oct 28, 2014, at 3:59 AM, Vito Logrillo <vitologrillo at gmail.com> wrote:
> > I've tried your solution without any result.
> > Below you can see the bro script that i've used
> Oh, sorry. That was only part of the solution. Those records attached to
> the connection record are filled out by scripts, but we don't have scripts
> that deal with additional RRs. You will have to handle the appropriate
> events and write your own script to do something with the data.
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro