[Bro] User Agent parser in bro
vitaly.repin at gmail.com
Sun Mar 4 11:02:54 PST 2018
Here you go: https://github.com/vitalyrepin/uap-bro
Installable through bro package manager.
I hope, it will be useful not only for my case.
2018-01-29 18:11 GMT+02:00 Seth Hall <seth at corelight.com>:
> Hi Vitaly!
> I've been wanting to port one of these type of things to Bro for a long
> time. That would be a great contribution if you wanted to take that on. I'm
> sure that a number of people would find it valuable. I don't know of anyone
> in the community that has already done it.
> On 22 Jan 2018, at 1:50, Vitaly Repin wrote:
> I am looking for a way to parse the User Agent string in bro.
> Is anybody aware of any bro scripts which are similar in functionality to
> something like ua-parser-js ( https://github.com/faisalman/ua-parser-js )
> or ES user-agent ingest plugin ( https://www.elastic.co/guide/
> en/elasticsearch/plugins/master/ingest-user-agent.html )?
> Thanks in advance!
> WBR & WBW, Vitaly
> Bro mailing list
> bro at bro-ids.org
> Seth Hall * Corelight, Inc * www.corelight.com
WBR & WBW, Vitaly
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro