Dear all: I want to get some statistics about past connections. But the record_connection function in the “conn.bro”, it seems to deal with one connection. So I need to get the past connection, but I have no idea that which function/event should I modify . In the Ref-Manual document, I saw the l…

Hi Jack, Bro can automatically produce a connection log containing a 1-line summary of all flows it observes. It sounds like this should be pretty close to what you want. See here for details: http://www.bro-ids.org/wiki/index.php/Reference_Manual:_Analyzers_and_Events#Generic_Connection_Analysi…

I have some questions about Bro, thanks!

Zeek

Topic		Replies	Views
List of connections Zeek	1	112	May 6, 2022
Bro logging connections after specific daytime Zeek	3	134	May 6, 2022
List of connections Zeek	3	101	May 6, 2022
conn.bro Zeek	3	99	May 6, 2022
Question about creating custom conn logs. Zeek	2	118	May 6, 2022

I have some questions about Bro, thanks!

Related topics