SFTP analysis

Hello,

Does anyone know if Bro supports SFTP? Thanks in advance.

John

Hello John,

Thanks Johanna!

There is a builtin script /bro/frameworks/logging/postprocessors/sftp.bro. Can that be used and how? Thanks.

John

That is for copying Bro log files to another host via sftp, not for parsing sftp sessions, sorry.

Unless that is what you originally asked for :slight_smile:

Johanna