[Bro] How does Bro decrypt https traffic?
huzhenming36 at gmail.com
huzhenming36 at gmail.com
Tue Jul 10 03:03:12 PDT 2018
Thank you very much for your reply, now I know that Bro does not support
huzhenming36 at gmail.com
From: Mark W. Jeanmougin
Date: 2018-07-10 17:55
To: huzhenming36
CC: bro
Subject: Re: [Bro] How does Bro decrypt https traffic?
Hello Star!
bro does not support https decryption out of the box.
Normally, an enterprise would deploy an "https Decryption Appliance". That would perform the decryption and create a stream of unencrypted traffic to go to your Network Security devices, like bro.
MJ
On Tue, Jul 10, 2018 at 5:00 AM Star <huzhenming36 at gmail.com> wrote:
Hi friends
My name is Star and I am from Beijing, China,I am working on a project for pcap traffic analysis.Now I want to decrypt https traffic, I don't know if bro supports it?
Thank you
_______________________________________________
Bro mailing list
bro at bro-ids.org
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180710/8bbe5efa/attachment-0001.html
More information about the Bro
mailing list