[Bro] Yara integration with Bro 2.5

[Brian Wylie]

Erik has a good point about overhead. So for offloading (and because I love
python) I threw together the Bro to Python repo and added a yara example.

Might be useful if you like Python.. shrug...donno... just throwing it out
there :)

- https://github.com/Kitware/BroThon

On Wed, Apr 5, 2017 at 7:02 AM, erik clark <philosnef at gmail.com> wrote:

> Er, doesnt this come with  massive overhead? Also, file inspection rules
> are non-trivial. Given the number of files that bro processes, it seems
> that on anything other than a very tiny link this would cause giant
> problems...
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170412/5d6d6035/attachment.html