Layer 7 DoS attacks

Zeek
1

Hi all,

I saw an interesting post (http://mailman.icsi.berkeley.edu/pipermail/bro/2012-January/004508.html)about detecting layer 7 DoS attack using Bro, there was a script written by Seth Hall(seth@corelight.com)(http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120109/84fdf6c0/attachment.obj), but the script won’t work in the new version of Bro, so I was wondering if anyone had any idea on how to do it in Bro 2.5?

Thanks for any feedback in advance!

2

D'oh! Sorry, I ran a version I have on my laptop which was updated. I attached the version of the script that works now...

http-DoS-detector.bro (2.42 KB)