[Bro] How to convert name field in smb_files.log to "readable" string?

김수련 sunari1031 at gmail.com
Wed Nov 29 22:55:42 PST 2017


Hi, all

Is there some way that convert name field of smb_files.log to "readable"?

I got name value like "\u00ec\u0099\u0084"

It seems like unicode and I read weird string(e.g. ê¸°íš íŒ€) when I send
to ELK(characterset: utf-8).

I might need to convert it.

Any comments would be appreciated!

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20171130/5ca87384/attachment.html 


More information about the Bro mailing list