[Bro] Origin-Destination (OD) Flows

Martin Andreoni martin at gta.ufrj.br
Fri Oct 23 09:56:59 PDT 2015


 
Hi Community! 
I would like to make a Origen-Destination (OD) flow analysis with Bro. I
need to take flow parameters such as a netflow output. 
 I have been reading and with the conn_stats event I need to wait until
the TCP connection is closed. 
Is there any other event or way to make an on-line analysis of OD flows?

-- 

-------------------------

MARTIN ANDREONI 

_PhD. Student at __Grupo de Teleinformática e Automação (GTA) _

_Universidade Federal do Rio de Janeiro (UFRJ)_

_www.gta.ufrj.br/~martin [1]_
 

Links:
------
[1] http://www.gta.ufrj.br/~martin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20151023/6d650c78/attachment-0001.html 


More information about the Bro mailing list