[Bro] how to filter http traffic
Johanna Amann
johanna at icir.org
Fri Mar 25 10:03:56 PDT 2016
Hi,
If you only want to monitor port 80, e.g., you can set a custom capture
filter. See, e.g.,
https://www.bro.org/documentation/faq.html#how-can-i-set-a-custom-capture-filter
Johanna
On Fri, Mar 18, 2016 at 10:13:08AM +0800, mz wrote:
> Dear
>
> I only want to monitor and capture http traffic, how to configure?
>
> In addition, I found that when reading official manual picture below:
>
>
>
>
>
> It will figure event where the configuration script engine
>
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
More information about the Bro
mailing list