# RE: \[Bro\] Off-line analysis

**URL:** <https://community.zeek.org/t/re-bro-off-line-analysis/647>\
**Category:** Zeek\
**Created:** [December 6, 2004, 12:44am UTC](https://community.zeek.org/t/re-bro-off-line-analysis/647 "2004-12-06T00:44:54Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![john\_mcnicholas](https://avatars.discourse-cdn.com/v4/letter/j/fbc32d/32.png) [@john\_mcnicholas](https://community.zeek.org/u/john_mcnicholas)\
**Post date:** [December 6, 2004, 12:44am UTC](https://community.zeek.org/t/re-bro-off-line-analysis/647/1 "2004-12-06T00:44:54Z")

</div>

> Anyhow, what I really want to know is to do some ID attack ananlsys using

Bro.

> If you have experienced such things with Bro, please let me know.  
> I get some tcpdump raw file, but it is not easy to handle Bro for offline  
> test.

I'll gladly try to help once I figure out my nagging issues. Hopefully that  
will be before Tuesday.

john

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:37pm UTC](https://community.zeek.org/t/re-bro-off-line-analysis/647/2 "2022-05-06T15:37:16Z")

</div>

Closed on May 6, 2022, 3:37pm UTC