[Bro] Bro's evolutions

Jean-Philippe Luiggi jp.luiggi at free.fr
Tue Sep 12 07:43:26 PDT 2006


On Fri, Sep 08, 2006 at 04:07:32PM -0700, Jim Mellander wrote:
> LBL is running a netflow -> bro conversion package for internal
> monitoring.  In brief, we collect netflow records, parse them into Bro
> events, which are sent to a running Bro via the Brocolli library.  If
> you're interested in working with this, great - it some help,as its a
> bit of a hack.  I'll be happy to share what I'm doing...

  Hello Jim,
  
  Thank you for this information, i'll be happy using your software as it's
  exactly what i was looking for.

  Best regards.
  
> Jean-Philippe Luiggi wrote:
> > Hello All,
> > 
> > Several things :  
> > 
> > While i just sent a mail to Vern last week asking about the
> > availability of the svn repository, i too agree with Christian,
> > this access can bring its batch of problems so ...
> > 
> > Another subject we spoke a few months ago (if not a year) : "Netflow"
> > Let's imagine we would like having this used in "Bro", how doing this ?




More information about the Bro mailing list