The Bro documentation mentions a capability for logging packets in
tcpdump format:
http://bro-ids.org/Bro-reference-manual/tcpdump-save-file-that-Bro-write
s.html
But I can't find any further references or figure out how this is done.
I looked back through the archives a bit, but don't have time to
thoroughly scour them for any reference. Can anyone help?
Thanks,
Scott