[Bro] Intel Framework Issues

Disha Bora dbora at isightpartners.com
Mon Nov 23 09:12:23 PST 2015


Hi,

I have been using Bro's intel framework to input my intelligence feed and get matches in intel.log. I seem to only be getting hits on domains but not IPs or URLs. I have also tried it on the mal-dnssearch feeds with the same results. Is there any particular reason why this would happen? How can I fix it?

Thanks!

Disha Bora
Associate Product Manager
iSIGHT Partners
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20151123/cfe28397/attachment.html 


More information about the Bro mailing list