[Bro] Telnet analyzer

Johanna Amann johanna at icir.org
Tue Jul 19 10:58:06 PDT 2016


Hello Christian,

could you perhaps send me an example trace for this (or make a ticket on
tracker.bro.org and attach it there)? I could take a short look if this is
eomething that is easy to fix.

Johanna

On Fri, Jul 15, 2016 at 11:33:31AM -0300, Cristian Daniel Barbaro wrote:
> Hello, people.
> I'm trying detect when someone connects to Telnet and login is
> sucessful. But Bro never detects this event, only login_confused or
> login_confused_text events was detected.
> 
> Any idea?
> 
> Thanks. Regards...
> 
> -- 
> Cristian Daniel Barbaro
> CERTUNLP
> --
> 
> 
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> 


More information about the Bro mailing list