[Bro] Howto set up specific filters

[Robin Sommer]

On Thu, Aug 09, 2007 at 09:39 -0500, David Caldwell wrote:

> How do I set up a specific filter in BRO? For example, I want to filter
> thinks like aim, irc, edonkey, bittorrent...etc.

Sorry, I'm not sure what you mean by "filter" here. Are you refering
to a packet filter, i.e., a BPF expression? Do you want to include,
irc etc. traffic or filter it out?

Robin

-- 
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org 
LBNL/ICSI    * Fax   +1 (510) 666-2956 *   www.icir.org