[Bro] Reading from a text file

Robin Sommer robin at icir.org
Mon Apr 16 12:40:45 PDT 2012


On Sat, Apr 14, 2012 at 15:40 +0500, you wrote:

> Is there any way we can do it using Bro?

Not yet, but there will be soon. Bernhard Amann has developed a new
"input framework" that can feed external information into Bro both at
startup and also continuously during run-time. Currently, it can read
input from ASCII files and from PostgresSQL. There may be further
interfaces to other sources coming later.

This is actually pretty powerful for a range of applications, and
we're currently preparing the code for merging in. Assuming all goes
well, it will be part of Bro 2.1.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list