how to specify ip address through variables
rahul rakesh <[email protected]> Tue, 19 Nov 2019 18:15:15 +0530
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CADJmW1=RwPwLvFASEyKQdJtt=AHKe0PLAQV4COMY8mhw5dPz3A@mail.gmail.com> |
Hi all, First Question: ------------------ How I can specify the ip address of src-ip/dst-ip <cmp> <address-list> through variable like $External_Net like in snort signatures. Suppose same ip address is there in many signatures.How can I define it at one place. Second Q ------------- after event is generated,then how can i call either c++ code or python code from bro scripts.If it is possible ,can you provide me link. (Some where i read that through bro scripts, we can call python or c++ code) Third Q ----------- Currently Zeek is used at which super computing facility.Is it used at NERSC center. Just to know that. You can provide me link also. Thank you so much. Ravi _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek