[Bro] Bro's evolutions

Jean-Philippe Luiggi jp.luiggi at free.fr
Wed Sep 13 07:04:56 PDT 2006


Hello,

No problem, thank you a lot.

Best regards.

On Tue, Sep 12, 2006 at 04:35:58PM -0700, Jim Mellander wrote:
> I've had a couple of requests for this code, so I'm developing a web
> page for it.  Stay tuned.
> 
> 
> 
> Jean-Philippe Luiggi wrote:
> > On Fri, Sep 08, 2006 at 04:07:32PM -0700, Jim Mellander wrote:
> >> LBL is running a netflow -> bro conversion package for internal
> >> monitoring.  In brief, we collect netflow records, parse them into Bro
> >> events, which are sent to a running Bro via the Brocolli library.  If
> >> you're interested in working with this, great - it some help,as its a
> >> bit of a hack.  I'll be happy to share what I'm doing...
> > 
> >   Hello Jim,
> >   
> >   Thank you for this information, i'll be happy using your software as it's
> >   exactly what i was looking for.
> > 
> >   Best regards.
> >   
> >> Jean-Philippe Luiggi wrote:
> >>> Hello All,
> >>>
> >>> Several things :  
> >>>
> >>> While i just sent a mail to Vern last week asking about the
> >>> availability of the svn repository, i too agree with Christian,
> >>> this access can bring its batch of problems so ...
> >>>
> >>> Another subject we spoke a few months ago (if not a year) : "Netflow"
> >>> Let's imagine we would like having this used in "Bro", how doing this ?
> > 
> 
> 
> -- 
> Jim Mellander
> Incident Response Manager
> Computer Protection Program
> Lawrence Berkeley National Laboratory
> (510) 486-7204
> 
> The reason you are having computer problems is:
> 
> Daemon escaped from pentagram
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro



More information about the Bro mailing list