[Bro] Monitoring a directory and running bro on the PCAPs

Art Maddalena art.maddalena at teamaol.com
Fri Sep 23 10:26:50 PDT 2016


Does anyone have experience using Bro to run its analysis on PCAPs being
written to a directory in an automated fashion?
Should a cron just be run at a lag using bro -r and script options?
Thank you,

-Art
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160923/5d9a55c6/attachment-0001.html 


More information about the Bro mailing list