[Bro] delayed bro operation / update
jmellander at lbl.gov
Thu Jul 16 20:54:37 PDT 2015
I addressed a similar problem by writing a little C program that takes
pcaps and pushes them onto a virtual network interface, for bro to
monitor.... Now let me see if I can find that code.
On Thu, Jul 16, 2015 at 3:19 AM, Kristoffer Björk <
kristoffer.bjork at gmail.com> wrote:
> sounds intreresting. Would it be possible for you to make that tcpslice
> patch available?
> On Tue, Jul 7, 2015 at 4:15 PM, Seth Hall <seth at icir.org> wrote:
>> > On Jul 7, 2015, at 8:11 AM, Frank Meier <franky.meier.1 at gmx.de> wrote:
>> > just as a follow up: I experimented with a patched version of tcpslice
>> which opens pcaps and sends them to a fifo.
>> Hah! That’s an interesting approach.
>> Seth Hall
>> International Computer Science Institute
>> (Bro) because everyone has a network
>> Bro mailing list
>> bro at bro-ids.org
> Bro mailing list
> bro at bro-ids.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro