[Bro] How filter machine name registration?

Seth Hall seth at icir.org
Thu Oct 23 06:52:18 PDT 2014


On Oct 23, 2014, at 8:16 AM, Vito Logrillo <vitologrillo at gmail.com> wrote:

> How can i filter netbios name service registration?

It all shows up in dns.log and you are given access to it through the various DNS events.  Could you describe what you are trying to accomplish?  Providing a packet capture and describing what you want to get out of it would be the most useful.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/





More information about the Bro mailing list