Hi Community!
I would like to make a Origen-Destination (OD) flow analysis with Bro. I need to take flow parameters such as a netflow output.
I have been reading and with the conn_stats event I need to wait until the TCP connection is closed.
Is there any other event or way to make an on-line analysis of OD flows?