[Bro] Log serial number in ssl.log

Azoff, Justin S jazoff at illinois.edu
Wed Mar 29 14:07:16 PDT 2017


> On Mar 29, 2017, at 4:58 PM, Robert Harrelson <bobharrelsons at gmail.com> wrote:
> 
> Thank you for the quick reply.
> 
> ssl.log
> 
> #close	2017-03-22-16-35-24
> 
> conn.log
> 
> 
> #close	2017-03-27-16-40-01

These logs are from 5 days apart and do not match up with each other.

I'd need to see the conn.log entires that correspond to connections like CrfdsS268VpsZjzjV2, C3PoFJ0FJ51yFKOm7, CoxsGYKjELt5oTZUj, C5EqDA4f0hY9BlCR2d etc

-- 
- Justin Azoff




More information about the Bro mailing list