Question

Zeek is not storing files, even after script was loaded. What am I missing?

score 1.2k · Answer 1 · 2021-05-11T18:38:07.587000

1.2k

Views

Zeek is not storing files, even after script was loaded. What am I missing?

Published on 11 May 2021 at 18:38

score 83 · Answer 2 · 2020-05-22T12:54:55.027000

83

Views

Zeek/Bro IDS - Sumstats - qty similarly sized TCP segments?

Published on 22 May 2020 at 12:54

score 421 · Answer 3 · 2020-04-21T16:20:23.957000

421

Views

How to set mmdb_dir in Zeek/Bro

Published on 21 April 2020 at 16:20

score 212 · Answer 4 · 2020-04-08T19:37:28.693000

212

Views

Does Zeek allow to inspect RTP headers?

Published on 08 April 2020 at 19:37

score 2.2k · Answer 5 · 2020-04-03T17:19:26.267000

2.2k

Views

Zeek cluster fails with pcap_error: socket: Operation not permitted (pcap_activate)

Published on 03 April 2020 at 17:19

score 908 · Answer 6 · 2020-04-01T02:43:32.387000

908

Views

How to configure bro to ignore traffic from certain subnets?

Published on 01 April 2020 at 02:43

score 591 · Answer 7 · 2020-03-31T12:47:01.657000

591

Views

Zeek Scripting "Error field missing value"

Published on 31 March 2020 at 12:47

score 138 · Answer 8 · 2020-03-23T22:02:45.353000

138

Views

Is it possible to inspect TCP reserved bits with Zeek?

Published on 23 March 2020 at 22:02

score 346 · Answer 9 · 2020-01-19T09:37:25.080000

346

Views

Extract the Source IP Address from two different log samples with regex

Published on 19 January 2020 at 09:37

score 1.1k · Answer 10 · 2019-12-17T18:16:15.657000

1.1k

Views

Zeek missing loaded_scripts.log file

Published on 17 December 2019 at 18:16

score 361 · Answer 11 · 2019-11-27T15:24:06.810000

361

Views

Zeek (Bro) rename log according to input file

Published on 27 November 2019 at 15:24

score 2.7k · Answer 12 · 2019-11-13T19:12:49.990000

2.7k

Views

Steps for running a custom script in Zeek(bro) NSM and generating notice in log files?

Published on 13 November 2019 at 19:12

score 433 · Answer 13 · 2019-06-04T22:54:39.540000

433

Views

Bro / Zeek broctl unable to find peers

Published on 04 June 2019 at 22:54

score 1.5k · Answer 14 · 2019-06-04T20:19:52.007000

1.5k

Views

Bro / Zeek debugging logs?

Published on 04 June 2019 at 20:19

score 473 · Answer 15 · 2019-05-28T02:30:06.620000

473

Views

Which services are identified in conn.log by Bro?

Published on 28 May 2019 at 02:30

score 449 · Answer 16 · 2019-05-21T13:26:09.757000

449

Views

Bro script for reading a list of Ips and domains

Published on 21 May 2019 at 13:26

score 280 · Answer 17 · 2019-05-09T13:13:21.320000

280

Views

Missing logs in current folder

Published on 09 May 2019 at 13:13

score 104 · Answer 18 · 2019-04-10T09:48:04.950000

104

Views

Where are built in scripts for identifying popular web applications?

Published on 10 April 2019 at 09:48

score 642 · Answer 19 · 2019-02-11T04:09:57.317000

642

Views

Security Onion (Ubuntu 16.04) syslog-ng to multiple sources

Published on 11 February 2019 at 04:09

score 110 · Answer 20 · 2018-11-30T01:16:01.900000

110

Views

Grok filter isn't matching to the bro httplog data

Published on 30 November 2018 at 01:16

List Question

Zeek is not storing files, even after script was loaded. What am I missing?

Zeek/Bro IDS - Sumstats - qty similarly sized TCP segments?

How to set mmdb_dir in Zeek/Bro

Does Zeek allow to inspect RTP headers?

Zeek cluster fails with pcap_error: socket: Operation not permitted (pcap_activate)

How to configure bro to ignore traffic from certain subnets?

Zeek Scripting "Error field missing value"

Is it possible to inspect TCP reserved bits with Zeek?

Extract the Source IP Address from two different log samples with regex

Zeek missing loaded_scripts.log file

Zeek (Bro) rename log according to input file

Steps for running a custom script in Zeek(bro) NSM and generating notice in log files?

Bro / Zeek broctl unable to find peers

Bro / Zeek debugging logs?

Which services are identified in conn.log by Bro?

Bro script for reading a list of Ips and domains

Missing logs in current folder

Where are built in scripts for identifying popular web applications?

Security Onion (Ubuntu 16.04) syslog-ng to multiple sources

Grok filter isn't matching to the bro httplog data

Trending Questions

Popular # Hahtags

Popular Questions