[Bro] store all packet

jean-philippe luiggi jean-philippe.luiggi at didconcept.com
Fri Apr 30 05:17:04 PDT 2010


Hello,

I'm not sure of what do you want exactly but i assume you're talking about
network packets ?

If so, you've to run something likes "tcpdump -w ..." instead of "bro".

Cheers,

Jean-Philippe.



* lzqsist <lzqsist at 163.com> [2010-04-30 17:45:06 +0800]:

> Hi,all.How to store all packet directly to the hard disk using  bro-1.5 ?
>  
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro



More information about the Bro mailing list