[Bro] webapp detection

[Raj Kumar]

Hi All,

Am trying to use the webapp detection script to detect webapps like
facebook etc

I saw previous threads it was mentioned to enable "*Make sure to set your
Sites::local_net variable * If you set it to
0.0.0.0/0

I have included  0.0.0.0/0 in networks.cfg,

I have also included in local.bro
@load protocols/http/detect-webapps
 redef Software::asset_tracking = ALL_HOSTS;

still I couldnt see any webapps traffic mentioning facebook i could see
only multicast address like 224.0.0.251

Any solution ,much appreciated

Thanks,
*Raj*
*IT Consultant*
*Mobile:  ** +45 **81923531*

*Lyskær 9** [image: Inline images 1]*

*2730 Herlev, Denmark  *

*Web:   **http://www.capmon.dk <http://www.capmon.dk/>*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170529/3d534510/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 18048 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170529/3d534510/attachment-0001.bin