[Bro] how to filter http traffic

mz mz89924 at 126.com
Thu Mar 17 19:13:08 PDT 2016


         I only want to monitor and capture http traffic, how to configure?

In addition, I found that when reading official manual picture below:



It will figure event where the configuration script engine


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160318/4972fda1/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 9508 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160318/4972fda1/attachment.jpe 

More information about the Bro mailing list