[Bro] Can Bro Anonymize the Data it Captures?

Robin Sommer robin at icir.org
Tue Sep 27 08:49:03 PDT 2011


On Tue, Sep 27, 2011 at 16:41 +0530, Wathsala Vithanage wrote:

> Is Bro capable of anonymizing the logs it generate?

Kind of. Bro 1.5 comes with the anonymization systems described in
this paper:

    http://conferences.sigcomm.org/sigcomm/2003/papers/p339-pang.pdf

This is very cool stuff. However, the code hasn't been maintained for
a long time already and, due to bit rot, there are various pieces here
and there that aren't working right anymore. For the upcoming release,
we have thus completely removed that functionality.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list