how can i config bro to let it only capture and analyze http packages?
lc z <[email protected]> Fri, 4 Oct 2019 10:02:40 +0800
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CADUtY13wBKGg3wW-4NQAX-PhTHd_Vio02Psa0MRt37zyzTXzxg@mail.gmail.com> |
Does it have this function?I just want to only analyze http packages.And Does it can reduce capture loss rate via analyzing less packages? Thanks a lot. _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek