Bro Blog: Using Bro to Build a Passive DNS Database

Zeek
1

http://blog.bro.org/2014/11/using-bro-to-build-passive-dns-database.html

Searching DNS logs became a lot faster with the launch of our Passive DNS tool for Bro. It uses Bro’s DNS logs to build a database that is more compact, and therefore a lot easier to search.

See how we did it by checking it out on GitHub:

https://github.com/JustinAzoff/bro-pdns