[Bro] P2P Traffic

[Michel Laterman]

I'm not sure that the BitTorrent analyzer has been updated for Bro v2.X.

I have written a small signature based script to get an estimate of traffic volumes.

Michel 

________________________________________
From: bro-bounces at bro.org <bro-bounces at bro.org> on behalf of Doris Schioberg <doris at bro.org>
Sent: May 11, 2015 10:30 AM
To: bro at bro.org
Subject: Re: [Bro] P2P Traffic

Hi Ron,

it that what you are looking for:
https://www.bro.org/sphinx-git/script-reference/proto-analyzers.html#bro-bittorrent

Doris

On 5/11/15 9:15 AM, Ron M. Jenkins wrote:
> Good morning;
>
> Can Bro detected P2P traffic, specially Bitorrent?
>
>
> Thanks!
>
>
>
> Ron Jenkins (Owner / Senior Architect)
> RMJ Consulting, LLC. "Bringing Companies and Solutions Together"
> 11715 Bricksome Ave STE B-7
> Baton Rouge, LA 70816
> Toll: 855-448-5214
> Direct. 225-448-5214 Ext #101
> Fax. 225-448-5324
> Cell. 225-931-1632
> Email. rjenkins at rmjconsulting.net<mailto:rjenkins at rmjconsulting.net>
> Web. http://www.rmjconsulting.net<http://www.rmjconsulting.net/>
> Log Siphon. http://www.logsiphon.com<http://www.logsiphon.com/>
> Linkedin. www.linkedin.com/in/ronmjenkins/<http://www.linkedin.com/in/ronmjenkins/>
> Twitter: www.twitter.com/RMJConsulting<http://www.twitter.com/RMJConsulting>
> Facebook: www.facebook.com/rmjcsconsulting<http://www.facebook.com/rmjcsconsulting>
> RMJ Consulting's Technology Corner. https://www.rmjconsulting.net/main/paper.php
>
>
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>

--
Doris Schioberg
Bro Outreach, Training, and Education Coordinator
International Computer Science Institute (ICSI Berkeley)
Phone: +1 (510) 289-8406 * doris at bro.org
_______________________________________________
Bro mailing list
bro at bro-ids.org
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro