Are there any Bro installations out there that have done any work
with Shibboleth?
We put Shibboleth into production here a couple of months back, and
I'd like to start getting some basic Bro visibility into Shib traffic.
The most basic level I wanted to get working was to generate Bro
events when it looks like the Shibboleth server is being pounded on
with dictionary attacks.
Has anyone out there done any other Shib/Bro work? I'd like to get
in touch and trade notes/code/brainstorming.
Steve