[Bro] How does Bro decrypt https traffic?

Michał Purzyński michalpurzynski1 at gmail.com
Tue Jul 10 02:59:17 PDT 2018


Bro does not decrypt ssl traffic. You can do it externally and feed the decrypted traffic into bro.

No one should ever be hijacking ssl traffic, though.

> On Jul 10, 2018, at 1:50 AM, Star <huzhenming36 at gmail.com> wrote:
> 
>        Hi friends
>             My name is Star and I am from Beijing, China,I am working on a project for pcap traffic analysis.Now I want to decrypt https traffic, I don't know if bro supports it?
> 
> 
> 
>                                                                                           Thank you
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180710/a16da8a1/attachment.html 


More information about the Bro mailing list