[Bro] Can bro scripts invoke other shells

anthony kasza anthony.kasza at gmail.com
Tue Nov 25 15:39:50 PST 2014


You can also check out the ActiveHTTP module to see how the Exec framework
uses curl to make http connections from Bro.

-AK
On Nov 25, 2014 2:50 PM, "Mike Sconzo" <sconzo at visiblerisk.com> wrote:

> Here's a sample script (for better or worse) that I wrote a while back
> that looks up files in Virustotal.
>
> https://github.com/sooshie/bro-scripts/blob/master/2.2-scripts/vt_check.bro
>
>
>
> On Tue, Nov 25, 2014 at 1:55 PM, Hosom, Stephen M <hosom at battelle.org>
> wrote:
> > I think you’re looking for exec.
> >
> >
> >
> > https://www.bro.org/sphinx/scripts/base/utils/exec.bro.html
> >
> >
> >
> >
> >
> > From: bro-bounces at bro.org [mailto:bro-bounces at bro.org] On Behalf Of John
> > Donnelly
> > Sent: Tuesday, November 25, 2014 2:35 PM
> > To: bro at bro.org
> > Subject: [Bro] Can bro scripts invoke other shells
> >
> >
> >
> > Hi,
> >
> >  Can a bro script run an external (linux ) command from an event handler
> ?
> >
> >
> >
> >
> >
> >
> > _______________________________________________
> > Bro mailing list
> > bro at bro-ids.org
> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
>
>
> --
> cat ~/.bash_history > documentation.txt
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20141125/00fb90a8/attachment.html 


More information about the Bro mailing list