[Bro] Intel Framework Issues

anthony kasza anthony.kasza at gmail.com
Mon Nov 23 09:50:51 PST 2015


Hi Disha,

Can you include your intel.dat file and the script you are using to load it
please?

-AK
On Nov 23, 2015 9:34 AM, "Disha Bora" <dbora at isightpartners.com> wrote:

> Hi,
>
> I have been using Bro's intel framework to input my intelligence feed and
> get matches in intel.log. I seem to only be getting hits on domains but not
> IPs or URLs. I have also tried it on the mal-dnssearch feeds with the same
> results. Is there any particular reason why this would happen? How can I
> fix it?
>
> Thanks!
>
> Disha Bora
> Associate Product Manager
> iSIGHT Partners
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20151123/ad1350cc/attachment.html 


More information about the Bro mailing list