Where to get detect-webapps log file?
Sachinji Giri <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CACwQ=9yLvuzfA3945e5=opVY=YqFgFa8ni+H-AS_XktqNU6MHQ@mail.gmail.com> |
Hi there, I am using zeek in a container with hosts network. My bro/zeek version is following. Bold text are the commands that get executed in the container. # docker run --cap-add=NET_RAW --net=host --rm blacktop/*zeek --version* bro version 2.6-255 I ran zeek with detect-webapps bro script from policy. I browsed a couple of phpadmin websites etc but *I could not get any logs specific to detect-webapps.* # docker run --cap-add=NET_RAW --net=host --rm blacktop/*zeek -i 'enp2s0' protocols/http/detect-webapps* listening on enp2s0 ~~~~~ It runs forever and I got following log files : conn.log dns.log packet_filter.log weird.log dhcp.log files.log ssl.log x509.log *Where to get detect-webapps log file?* *What does detect-webapps do and where it logs its data?* Any help will be much appreciated. -- Regards, Sachin Giri _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek