[Bro] PacketFilter

Dave Crawford bro at pingtrip.com
Sat Mar 18 11:01:35 PDT 2017


Damnit. I spoke too soon:

1489860004.749780	C7LM4TvxWGSWhxOL1	192.168.20.8	40972	239.254.127.63	60000


> On Mar 18, 2017, at 2:00 PM, Dave Crawford <bro at pingtrip.com> wrote:
> 
> That method worked perfect, thanks James.
> 
> I am curious if I was doing something wrong or if PacketFilter is buggy.
> 
>> On Mar 18, 2017, at 1:21 PM, James Lay <jlay at slave-tothe-box.net> wrote:
>> 
>> You could always just add it to your broctl.conf like so:
>> 
>> broargs = --filter 'your bpf here'
>> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170318/7c416151/attachment.html 


More information about the Bro mailing list