Dear all, I have looked at some files while still waiting for some hints for my previous question. Then I found the event "new_packet" , which looks promising. However, I DON"T know if the packet reported there is already "processed", i.e only valid packets for the connection are considered whi…

At present, the characteristics I need are: mean packet size and mean packet inter-arrival time, all per flow. In general, such statistics are a little bit difficult to get with Bro because its analysis works primarily with higher abstractions of activity, i.e., you write scripts without rely…

(Traffic characteristics extraction with Bro - Continue) - #3 by system - Zeek

Topic		Replies	Views	Activity
Traffic characteristics extraction with Bro Zeek	4	124	May 6, 2022
Using BRO for measuring TCP flow bandwidth Zeek	18	256	May 6, 2022
tcp delay events!? Zeek	6	186	May 6, 2022
using Bro as traffic analyzer. Zeek	18	161	May 6, 2022
packet post-processor plugin Zeek	9	161	May 6, 2022