[Bro] About BRO
anthony.kasza at gmail.com
Tue May 19 08:57:51 PDT 2015
Detecting denial of service attacks aren't as clear cut as detecting other
attacks e.g. SQL injection. What constitutes a DoS depends on your networks
specifics, such as bandwidth. A DoS to your network might not be a DoS to a
This being said, Bro does have the ability to detect common port scan
attacks. I believe the detection scripts are built on the sumstats
framework. Here's one Seth wrote <
hope that helps.
On May 19, 2015 8:44 AM, "Anshu Sharma" <anshu.sh123 at gmail.com> wrote:
> i m working on bro 2.3.2 version
> i want to know can we detect denial of service attack using bro?
> if possible can you please provide me some guidance .
> hoping your early reply
> Bro mailing list
> bro at bro-ids.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro