[Bro] [bro] FTP User Name
tgdesrochers at gmail.com
Wed Feb 10 09:03:50 PST 2016
I understand now. I am checking kerberos logs now to determine the user.
Thank you for responses.
On Feb 10, 2016 11:19 AM, "Seth Hall" <seth at icir.org> wrote:
> > On Feb 10, 2016, at 10:58 AM, Tim Desrochers <tgdesrochers at gmail.com>
> > So I guess my question should be, does bro pull the name from the the
> FTP session or does it try to pull info from something like the devices log
> to determine the user of the IP address who uploaded the file?
> From the FTP session as Vlad indicated.
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro