Hi all,
I am wondering whether I can capture all events at one point. I want to log
the sequence of all events happened between two hosts and look for interesting
patterns. thanks.
Bing
If you run Bro with the capture-events.bro script, it will record
all events into a file events.bst. You can then use "bro -x
events.bst" to get a readable ASCII version of that file.
Is this what you're looking for?
Robin