Hi all! would like to have some advices.
-
Is there a way for reading pcap files dynamically?
meaning, I am receiving many files, with a different names, to a local directory and would like Bro to parse them. This flow of files is continues. -
I am trying to make Bro the most efficient, so i would like to use most cumputer’s cores for Bro parsing.
Is there a way to do it?
** In both questions i have considered making a script which would work around the issues, but i would preffer a solution that is implemented in Bro.
Love for your help,
JohnY