[Bro] Bad DNS Detection

Umut Arus umuta at sabanciuniv.edu
Mon Mar 7 22:53:54 PST 2016


I'm setting up bro IDS recently. I will listen DNS traffic by span port but
I wonder, how can I detect malwares and victim clients that is used bad DNS
in network?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160308/993dfa22/attachment.html 

More information about the Bro mailing list