[Bro] I have some questions about Bro, thanks!

[Christian Kreibich]

Hi Jack,

Bro can automatically produce a connection log containing a 1-line
summary of all flows it observes. It sounds like this should be pretty
close to what you want. See here for details:

http://www.bro-ids.org/wiki/index.php/Reference_Manual:_Analyzers_and_Events#Generic_Connection_Analysis

(This is part of the ongoing effort to wikify the manuals, apologies if
it's still looking rough in places.)

Cheers,
Christian.
-- 
________________________________________________________________________
                                          http://www.cl.cam.ac.uk/~cpk25
                                                    http://www.whoop.org