[Zeek] how can i config bro to let it only capture and analyze http packages?

lc z hinconszlc at gmail.com
Thu Oct 3 19:02:40 PDT 2019


Does it have this function?I just want to only analyze http packages.And
Does it can reduce capture loss rate via analyzing less packages?  Thanks a
lot.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191004/f44af0b4/attachment.html 


More information about the Zeek mailing list