Dear All,
I wish to analyze HTTPS traffic with Bro and want to know what specific
changes might need to be done to the existing HTTP analyzer framework.
Thanks for the help.
Regards,
mohan
This really depends on your HTTP traffic. Bro handles the majority of HTTP cleanly directly out of the box. Have you tried feeding Bro some same trace files to see what shows up in the http.log file?
-AK