[Bro] Bro with 10Gb NIC's or higher

John Donnelly jdonnelly at dyn.com
Fri Jan 9 13:37:46 PST 2015


Ok  - I found it it : / - along with "weird"

How I can I specify another directory ?
What do the fields mean ?

root at x64-01:/# cat cap*
1420832673.023244,900.000068,bro,0,0,0.0
1420833573.023279,900.000035,bro,0,6,0.0
1420833727.951157,154.927878,bro,0,0,0.0
1420833885.693988,154.676438,bro,0,0,0.0




On Fri, Jan 9, 2015 at 3:29 PM, Seth Hall <seth at icir.org> wrote:

>
> > On Jan 9, 2015, at 4:02 PM, Oehlert, Samuel <soehlert at illinois.edu>
> wrote:
> >
> > Capture_loss.log and it should be with all your other logs once you turn
> it on. Remember to install, check, and restart brocontrol to get it turned
> on.
>
> After you add the following to local.bro of course…
>
> @load misc/capture-loss
>
>   .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150109/03e62207/attachment.html 


More information about the Bro mailing list