[Bro] Large outbound transfer

[Kellogg, Brian D (OLN)]

Attached...

Let me know if the inline documentation is not adequate.  It isn't as robust as I'd like, but I haven't had time to get back to it in the last couple months unfortunately.

Thank you,
Brian Kellogg

From: bro-bounces at bro.org [mailto:bro-bounces at bro.org] On Behalf Of Michael Bower
Sent: Tuesday, March 25, 2014 10:11 PM
To: Bro Mailing List
Subject: [Bro] Large outbound transfer

Has anyone written a script to look for large outbound file transfers?

Thanks

--
Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140326/bfe436ec/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: suspiciousTx.bro
Type: application/octet-stream
Size: 5382 bytes
Desc: suspiciousTx.bro
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140326/bfe436ec/attachment.obj