how to present network analysis results in bro graphically

Zeek
#1

hi
i running bro on trace files are captured by tcpdump
i use following command:
bro -r tracefile conn

i want to plot a graph to understand how many connection using http service(during time)

can bro plot graph?
if can’t how to do this work?

#2

Hello Hossein,

There're some tools around :

- xplot
- afterglow
- picviz

May i suggest you take a look to : www.secviz.org, you'll get some
ideas of what you can get as pictures (with related tools)..

With regards,

Jean-Philippe.

#3

hossein talebi wrote:

i want to plot a graph to understand how many connection using http
service(during time)

Here's an example of plotting connection using afterglow:

http://www.security.org.my/index.php?/archives/Bro-+-Afterglow-Flow-Insight-with-Link-Graph.html

--mel

#4