[Bro] how to filter http traffic

Johanna Amann johanna at icir.org
Fri Mar 25 10:03:56 PDT 2016


Hi,

If you only want to monitor port 80, e.g., you can set a custom capture
filter. See, e.g.,
https://www.bro.org/documentation/faq.html#how-can-i-set-a-custom-capture-filter

Johanna

On Fri, Mar 18, 2016 at 10:13:08AM +0800, mz wrote:
> Dear
> 
>          I only want to monitor and capture http traffic, how to configure?
> 
> In addition, I found that when reading official manual picture below:
> 
>  
> 
>          
> 
> It will figure event where the configuration script engine
> 
>  
> 



> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro



More information about the Bro mailing list