"time" format in Bro log files

Zeek
1

Dear All

I am just a beginner working with Bro IDS. This is a sample line of the conn.log file I have got as a result of running Bro on my capture file:

1235293253.403384 0.062331 79.127.0.27 81.31.174.213 http 51271 80 tcp ? 144 SHR X cc=1

The problem is I cannot interpret the time record (1235293253.403384). Can you please help me?

Best Regards
Laleh Arshadi

2

It's a Unix timestamp, i.e., seconds since Jan 1, 1970. To get
something more readable, pipe the conn.log through the cf tool in
aux/cf.

Robin