Reports

Zeek
1

In the logs directory /usr/local/bro/logs, I have logs about my scan tests and real traffic, but if I run the site-report.pl and mail_reports.sh scripts, they don’t show
the scans and incidents.

What the best form to resolve this? The report shows somes local IPs, but it doesn’t show the scans or incidents details. And if I generate other reports with new logs the report was the same :frowning:

Thanks
Angelita

2

In the logs directory /usr/local/bro/logs, I have logs with incidents received by real traffic, but if I run the site-report.pl and mail_reports.sh scripts, the report doesn’t show the scans and incidents correctly. The report shows the victim IPs.

What the best form to resolve this? The report shows local or my IPs, but it doesn’t show the scans or incidents details.

Regards,
Angelita