[Bro] Store PCAP logs

陈昱竹 billcyz at gmail.com
Mon Aug 3 06:14:36 PDT 2015


Hello,

I've installed Bro IDS on my computer, and I want to know is it possible to
make Bro generate pcap logs? Because I want to use Wireshark to analyze Bro
logs.
Another question, does anyone tried Splunk to analyze Bro logs? Can anyone
give me some advice?

Any help would be great. Thank You.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150804/c9616098/attachment.html 


More information about the Bro mailing list