[Bro] Payload

[Johanna Amann]

Hi,

in case this is still interesting - I would try using
https://www.bro.org/sphinx/scripts/base/bif/plugins/Bro_TCP.functions.bif.bro.html#id-set_contents_file
in one of the new_connection events.

Johanna

On Tue, Oct 17, 2017 at 12:06:12PM +0200, Rober Fernández wrote:
> Hi,
> 
> How can I get the payload of each connection and print each payload in a
> different file?
> 
> Regards

> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro