Dear All I am just a beginner working with Bro IDS. This is a sample line of the conn.log file I have got as a result of running Bro on my capture file: 1235293253.403384 0.062331 79.127.0.27 81.31.174.213 http 51271 80 tcp ? 144 SHR X cc=1 The problem is I cannot interpret the time record (12352…

It's a Unix timestamp, i.e., seconds since Jan 1, 1970. To get something more readable, pipe the conn.log through the cf tool in aux/cf. Robin

"time" format in Bro log files

Topic		Replies	Views
Basic questions about the use of Bro. Zeek	2	107	May 6, 2022
TimeStamp of Bro output Zeek	1	91	May 6, 2022
time format Zeek	1	112	May 6, 2022
timestamp Zeek	2	186	May 6, 2022
Timestamp conversion code Zeek	3	154	May 6, 2022