Bro - Revision history

Admin: /* Minimal Bro Configuration */

2018-01-28T04:33:40Z

Minimal Bro Configuration

@@ Line 66: / Line 66: @@
 <code>$PREFIX/etc/networks.cfg</code> to specify the networks to consider local
-<code>$PREFIX/etc/broctl.cf</code> to specify the email address and log rotation interval
+<code>$PREFIX/etc/broctl.cfg</code> to specify the email address and log rotation interval
 ==Broctl==

2018-01-28T04:28:09Z

Broctl

@@ Line 55: / Line 55: @@
 sudo setcap cap_net_raw,cap_net_admin=eip /path/to/bro
 </pre>
 ==Broctl==

2018-01-28T04:24:03Z

Broctl

← Older revision		Revision as of 04:24, 28 January 2018
Line 47:		Line 47:

	Before using, make sure you add <code>/usr/local/bro/bin</code> to your <code>$PATH</code>.		Before using, make sure you add <code>/usr/local/bro/bin</code> to your <code>$PATH</code>.

			==Allowing Non-Sudo Users to Capture Packets==

			To allow non-sudo users to capture packets:

			<pre>
			sudo setcap cap_net_raw,cap_net_admin=eip /path/to/bro
			</pre>

	==Broctl==		==Broctl==

2018-01-28T04:21:59Z

Installing

@@ Line 42: / Line 42: @@
 </pre>
-this will install to <code>/usr/local/</code>
+this will install to <code>/usr/local/bro</code>
 =References=

2018-01-26T15:39:38Z

Notes

← Older revision		Revision as of 15:39, 26 January 2018
Line 44:		Line 44:
	this will install to <code>/usr/local/</code>		this will install to <code>/usr/local/</code>

	=~~Notes~~=		=References=

	~~How would you integrate outlier detection, unsupervised learning, and classification algorithms to improve networking benchmarks and differentiation of traffic?~~		Bro documentation on github: https://github.com/bro/bro/tree/master/doc

	~~What does Bro~~ do ~~"under the hood" and how can that be improved by machine learning?~~		quickstart once you do make docs: file:///home/charles/codes/security/bro/build/html/quickstart/index.html

	=Flags=		=Flags=

	{{NetworkMonitoringFlag}}		{{NetworkMonitoringFlag}}

2018-01-25T15:56:50Z

Debian - from source

← Older revision		Revision as of 15:56, 25 January 2018
Line 30:		Line 30:
	</pre>		</pre>

	~~then~~ the usual:		In order to build Bro on Debian 9, install libssl1.0-dev instead of libssl-dev.

			(Link: https://github.com/bro/bro/blob/master/doc/install/install.rst)

			Then the usual:

	<pre>		<pre>

2018-01-25T15:11:08Z

@@ Line 13: / Line 13: @@
 Hat tip:
 * http://wiki.securityweekly.com/wiki/index.php/Episode336
 =Notes=
@@ Line 20: / Line 46: @@
 What does Bro do "under the hood" and how can that be improved by machine learning?
+=Flags=
 {{NetworkMonitoringFlag}}

2017-04-18T05:04:56Z

Notes

← Older revision		Revision as of 05:04, 18 April 2017
Line 22:		Line 22:


	~~[[Category:Security]]~~		{{NetworkMonitoringFlag}}
	~~[[Category:Networking]]~~
	~~[[Category:Network Monitoring]]~~

2017-04-18T05:04:26Z

Returning Notes

← Older revision		Revision as of 05:04, 18 April 2017
Line 14:		Line 14:
	* http://wiki.securityweekly.com/wiki/index.php/Episode336		* http://wiki.securityweekly.com/wiki/index.php/Episode336

	=~~Returning~~ Notes=		=Notes=

			How would you integrate outlier detection, unsupervised learning, and classification algorithms to improve networking benchmarks and differentiation of traffic?

			What does Bro do "under the hood" and how can that be improved by machine learning?


	Returning to this: how do you utilize outlier detection, unsupervised learning, and classification to improve networking benchmarks and differentiation of traffic? (Or maybe that's what bro actually does in the first place.)

	[[Category:Security]]		[[Category:Security]]
	[[Category:Networking]]		[[Category:Networking]]
			[[Category:Network Monitoring]]

2017-04-18T05:03:14Z