[Bro] FTP password

김희철 hckim at narusec.com
Wed Sep 16 23:39:58 PDT 2015

I have setup bro 2.3
did not change any setting but some of ftp.log has password  printed out

1442471625.330839 CJtp9r1Ww7Nrjco5H4 x.x.x.x 511 y.y.y.y 561 ftpuser safepc
RETR ftp://w.w.w.w/WINDOWS7/64/Setup.dat - 226 Transfer complete. - - - - -

I checked ftp config but "default_capture_password = F"

do I have to do something to not capture password ?
Thank you
Hichul Kim 김희철 선임 연구원

Naru Security  (주)나루씨큐리티
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150917/3dcda6f4/attachment.html 

More information about the Bro mailing list