[Bro] DDoS detection

[Tyler T. Schoenke]

Just wondering if anyone has a DDoS detection script for Bro 2.2+.   I saw there was an older one for Bro 1.5, but was wondering if someone created an updated one using the new SumStats framework.  Please let me know if there is an out-of-the-box way to detect DDoS that I am missing.

Thanks,

Tyler

--
--
Tyler Schoenke
Network Security Program Manager
IT Security Office
University of Colorado at Boulder

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140904/0b3d5ad8/attachment.html