[Bro] duplicate traffic

Dk Jack dnj0496 at gmail.com
Tue May 8 21:05:03 PDT 2018


Hi,
I am dealing with a peculiar problem. Our bro sniffing traffic on a span
port. Sometimes, we are seeing duplicate traffic. When this happens our
downstream analysis has problems because of the duplicate log entries in
the bro logs etc. Is there a way to detect and prevent the logging of
duplicate entries in bro logs.

Regards,
Dk.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180508/4cc24610/attachment.html 


More information about the Bro mailing list