[Bro] looking for bro script

Greg Kosinovsky kosinovsky1 at llnl.gov
Wed Nov 4 16:34:19 PST 2009


Is there an existing bro script that sessionizes the incoming packet 
flow but keeps all of the original packets associated with each 
recognized session?

This seems like something fairly "standard", so I probably don't need 
to reinvent the wheel on this one.

Thank you,

Greg




More information about the Bro mailing list