[Bro] Layer 2 Info

[Drew Dixon]

This may not help solve the problem you're having but just FYI Bro 2.5 also
logs VLAN ID's now, from the new functionality section at the link below:

"Bro now tracks VLAN IDs. To record them inside the connection log, load
protocols/conn/vlan-logging.bro."

https://www.bro.org/documentation/beta/NEWS.bro.html

-Drew


On Thu, Nov 3, 2016 at 9:02 PM, Jan Grashöfer <jan.grashoefer at gmail.com>
wrote:

> Hi Luis,
>
> > Is there any way to glean layer 2 information from bro? Or maybe a
> reliable
> > means of correlating IPs to hostnames?
>
> Bro 2.5 (beta2 available) will support logging of MAC addresses:
> https://github.com/bro/bro/blob/master/scripts/site/local.bro#L98
>
> Best regards,
> Jan
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161104/c95cc356/attachment.html