[Bro] User Agent parser in bro

Vitaly Repin vitaly.repin at gmail.com
Sun Mar 4 11:02:54 PST 2018


Hello,

Here you go: https://github.com/vitalyrepin/uap-bro

Installable through bro package manager.

I hope, it will be useful not only for my case.



2018-01-29 18:11 GMT+02:00 Seth Hall <seth at corelight.com>:

> Hi Vitaly!
>
> I've been wanting to port one of these type of things to Bro for a long
> time. That would be a great contribution if you wanted to take that on. I'm
> sure that a number of people would find it valuable. I don't know of anyone
> in the community that has already done it.
>
> .Seth
>
> On 22 Jan 2018, at 1:50, Vitaly Repin wrote:
>
> Hello,
>
> I am looking for a way to parse the User Agent string in bro.
>
> Is anybody aware of any bro scripts which are similar in functionality to
> something like ua-parser-js ( https://github.com/faisalman/ua-parser-js )
> or ES user-agent ingest plugin ( https://www.elastic.co/guide/
> en/elasticsearch/plugins/master/ingest-user-agent.html )?
>
> Thanks in advance!
> --
> WBR & WBW, Vitaly
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
> --
> Seth Hall * Corelight, Inc * www.corelight.com
>



-- 
WBR & WBW, Vitaly
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180304/d639b71e/attachment.html 


More information about the Bro mailing list