[Bro] How to Set N-byte of Payload to be Processed by Bro?

Hashem Alaidaros aidaros.dev at gmail.com
Sat Jul 2 06:23:46 PDT 2016


Hi everyone,
I use signature framework in Bro. I want Bro to capture and processes only
the first N-bytes of each packet received. In other words, only the first
N-bytes will be compared with the signature.
How to do that?
Aidaros
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160702/522a7b6e/attachment.html 


More information about the Bro mailing list