[Bro-Dev] HTTP Sensitive POST bro policy

Seth Hall seth at icir.org
Wed Apr 30 13:04:29 PDT 2014


On Apr 30, 2014, at 1:18 PM, Jim Mellander <jmellander at LBL.GOV> wrote:

> For a number of reasons, I elected to write the attached bro policy, which looks at http POSTs and performs regular expression matching on the posted data.

Neat trick Jim. :)

This actually brings up something that I've been meaning to work on for quite a while that would make this job *a lot* easier and work better...

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20140430/bade1d22/attachment.bin 


More information about the bro-dev mailing list