[Bro] BRO and CANBUS Protocols

Johanna Amann johanna at icir.org
Fri Aug 10 15:33:39 PDT 2018


Hi,

> Does anyone have any experience with CANBUS protocol specifically using the
> J1939 standards? Is this something that BRO can process?

from what I can tell, J1939 is not an IP-based protocol - Bro is currently
limited to IP communication.

Note that this is not really an inherent design problem of Bro - it is
just that no one implemented that yet.

In case I am wrong and this is somehow layered over IP - we also sadly
don't have any analyzers for that.

Johanna


More information about the Bro mailing list