[Bro] TCP connection summaries

[Jon Schipp]

To pass a BPF try ``-f tcp''


On Sat, Sep 28, 2013 at 8:07 AM, Laleh Arshadi <la_arshadi at yahoo.com> wrote:

> Hi all
>
> I see that you can get a connection summary log of an offline pcap traffic
> file by running bro with a simple command line as:
> bro -r traffic_file_name
> I have tested this command and it works well. But I am only interested in
> TCP connection summaries so I tried:
> bro -r traffic_file_name tcp
> But I get an error indication 'tcp' as unkown. What have I missed here?
>
> Regards
> L. Arshadi
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>



-- 
Jon Schipp,
jonschipp.com, sickbits.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130928/34529e80/attachment.html