[Discussion] David's Bro Script

Martin Holste mcholste at gmail.com
Tue Nov 4 01:14:39 UTC 2008


David had a fine post again today <
http://blog.vorant.com/2008/11/detecting-outgoing-connections-from.html>
showing how to make a Bro script from scratch which identified
non-whitelisted traffic.  Could one of the Bro experts show how to take that
and make it able to be dynamically updated at run-time?

Thanks,

Martin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/discussion/attachments/20081103/80e523b0/attachment-0002.html>


More information about the Discussion mailing list