[Bro] RSS and packet reordering
Seth Hall
seth at icir.org
Tue Aug 26 07:55:32 PDT 2014
On Aug 26, 2014, at 10:45 AM, Jesse Bowling <jessebowling at gmail.com> wrote:
> Interesting! Will this tool be flexible enough to also feed packets to other programs on the same box such as argus, snort, etc?
Yep, that was a specific design requirement. It uses the newish netmap feature "pipes" to give you specially named interfaces that you can open in anything using the netmap libpcap support.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140826/2e591aa3/attachment.bin
More information about the Bro
mailing list