[Bro] Does Bro generate only one event for one network connection?
nellieyun at gmail.com
Wed Aug 5 06:12:01 PDT 2015
Dear Bro team,
I have a question about Bro. Does Bro generate only one event for one
packet/connection? Or Bro will generate multiple events for one
I have read the paper "Bro: A system for Decting Network Intruder in
Real-time." The example showed Bro did generate a "Finger" event when the
connection meet more conditions instead of a TCP_connection event. Is this
Nuyun Zhang (Nellie) Ph.D.
CCIT of Clemson University
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro