[Bro] Bro's evolutions

Jim Mellander jmellander at lbl.gov
Tue Sep 12 16:35:58 PDT 2006


I've had a couple of requests for this code, so I'm developing a web
page for it.  Stay tuned.



Jean-Philippe Luiggi wrote:
> On Fri, Sep 08, 2006 at 04:07:32PM -0700, Jim Mellander wrote:
>> LBL is running a netflow -> bro conversion package for internal
>> monitoring.  In brief, we collect netflow records, parse them into Bro
>> events, which are sent to a running Bro via the Brocolli library.  If
>> you're interested in working with this, great - it some help,as its a
>> bit of a hack.  I'll be happy to share what I'm doing...
> 
>   Hello Jim,
>   
>   Thank you for this information, i'll be happy using your software as it's
>   exactly what i was looking for.
> 
>   Best regards.
>   
>> Jean-Philippe Luiggi wrote:
>>> Hello All,
>>>
>>> Several things :  
>>>
>>> While i just sent a mail to Vern last week asking about the
>>> availability of the svn repository, i too agree with Christian,
>>> this access can bring its batch of problems so ...
>>>
>>> Another subject we spoke a few months ago (if not a year) : "Netflow"
>>> Let's imagine we would like having this used in "Bro", how doing this ?
> 


-- 
Jim Mellander
Incident Response Manager
Computer Protection Program
Lawrence Berkeley National Laboratory
(510) 486-7204

The reason you are having computer problems is:

Daemon escaped from pentagram



More information about the Bro mailing list