[Bro] How should Bro to read wireshark trace file

Qinwen Hu qhu009 at aucklanduni.ac.nz
Tue Mar 27 01:42:50 PDT 2012


Hi All:

I am a new user, I have some trace files, which captured by using
wireshark, when I use Bro to read it, I got the error message, which
shows "fatal
error: ./bro: problem with trace file alert1.pcap - alert1.pcap: No such
file or directory" ,
 or if I run "bro alert1 local", I got "fatal error: ./bro: problem with
trace file alert1 - unknown file format"

is anyone know how to solve this problem?

Thank you very much


Regards

Steven
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120327/8483df16/attachment.html 


More information about the Bro mailing list