[Bro] Adding interface to bro logs

[Eric Ooi]

Check out Example 2:
https://blog.zeek.org/2012/02/filtering-logs-with-bro.html

On Fri, Dec 14, 2018 at 4:15 AM Samual Barker <sbarker at nettitude.com> wrote:

> Hi
>
>
> Does anyone know how to add the name of the interface Bro is listening on
> to the logs? I currently have a server listening on multiple interfaces and
> would be useful to have the interface logged so that I can retrieve the
> pcap for any event more easily
>
>
> Many thanks
>
> Sam
>
>
> ___________________________________________________________________________________
>
> Lloyd’s Register and variants of it are trading names of Lloyd’s Register
> Group Limited, its subsidiaries and affiliates.
> Nettitude Limited, registered in England, registered number 4705154
> Registered office: 1 Jephson Court, Tancred Close, Leamington Spa,
> Warwickshire, CV31 3RZ. A member of the Lloyd’s Register group.
>
>
>
> Lloyd’s Register Group Limited, its affiliates and subsidiaries and their
> respective officers, employees or agents are individually and collectively,
> referred to in this clause as ‘Lloyd’s Register’. Lloyd’s Register assumes
> no responsibility and shall not be liable to any person for any loss,
> damage or expense caused by reliance on the information or advice in this
> document or howsoever provided, unless that person has signed a contract
> with the relevant Lloyd’s Register entity for the provision of this
> information or advice and in that case any responsibility or liability is
> exclusively on the terms and conditions set out in that contract.
>
>
> ___________________________________________________________________________________
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20181214/6cb315ab/attachment-0001.html