[Bro] Bro Log Analysis - by CIDR

[Ryan]

If I do write a Python script to do this - I'm heavily inclined to use
Python 3 (for the ipaddress Module).

Ryan Peck


On Wed, Apr 29, 2015 at 9:42 AM, Ryan <iamreck at gmail.com> wrote:

> I'm looking at analyzing bro logs, filtering by an arbitrary CIDR.
>
> Before I go write a Python script that will handle this - I was wondering
> if something already existed.
>
> As an example -
>
>     zcat ssl.12\:00\:00-13\:00\:00.log.gz | bro-cut server_name id.orig_h
> | by_CIDR.py 129.21.1.0/23
>
> I was also contemplating modifying bro-cut to handle this.
>
> Thanks,
> Ryan
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150429/93c444b1/attachment.html