[Bro] Access pcap filename in script land

anthony kasza anthony.kasza at gmail.com
Mon Mar 14 17:23:30 PDT 2016


Nope.

-AK
On Mar 14, 2016 2:51 PM, "Valerio" <valerio.click at gmx.com> wrote:

> Hi all,
>
> in case bro is executed offline on a pcap with:
>
> bro -r file1.pcap script.bro
>
> is there a directive I can insert into script.bro to access the pcap
> filename?
>
> many thanks in advance,
> Valerio
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160314/d5da6003/attachment.html 


More information about the Bro mailing list