On Thu, Aug 09, 2007 at 09:39 -0500, David Caldwell wrote:
How do I set up a specific filter in BRO? For example,
I want to filter
thinks like aim, irc, edonkey, bittorrent...etc.
Sorry, I'm not sure what you mean by "filter" here. Are you refering
to a packet filter, i.e., a BPF expression? Do you want to include,
irc etc. traffic or filter it out?
Robin Sommer * Phone +1 (510) 931-5555 * robin(a)icir.org
LBNL/ICSI * Fax +1 (510) 666-2956 * www.icir.org