Hello, I understand there is a SIP analyzer available for BRO,
as described here: www.bro-ids.org/bro-workshop-2007/slides/BroNews.pdf
Is this publicly available? If so, where?
thanks,
Andy
Andy Pyles wrote:
Hello, I understand there is a SIP analyzer available for BRO,
as described here: www.bro-ids.org/bro-workshop-2007/slides/BroNews.pdfIs this publicly available? If so, where?
Yes there is one, BUT: It's in not solidly tested and not performances tuned. (I.e., it's alpha). That's why it's not in the official release. If you're interested I can send you the code, but be warned that it might not (yet) be fit for use in a production environment.
hth
Gregor