Hi,
I am dealing with a peculiar problem. Our bro sniffing traffic on a span port. Sometimes, we are seeing duplicate traffic. When this happens our downstream analysis has problems because of the duplicate log entries in the bro logs etc. Is there a way to detect and prevent the logging of duplicate entries in bro logs.
Regards,
Dk.