SIP Analyzer

Zeek
1

Hello, I understand there is a SIP analyzer available for BRO,
as described here: www.bro-ids.org/bro-workshop-2007/slides/BroNews.pdf

Is this publicly available? If so, where?

thanks,
Andy

2

Andy Pyles wrote:

Hello, I understand there is a SIP analyzer available for BRO,
as described here: www.bro-ids.org/bro-workshop-2007/slides/BroNews.pdf

Is this publicly available? If so, where?

Yes there is one, BUT: It's in not solidly tested and not performances tuned. (I.e., it's alpha). That's why it's not in the official release. If you're interested I can send you the code, but be warned that it might not (yet) be fit for use in a production environment.

hth
Gregor