[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bro
Subject:    Re: [Bro] how to filter http traffic
From:       Johanna Amann <johanna () icir ! org>
Date:       2016-03-25 17:03:56
Message-ID: 20160325170356.GC47770 () wifi101 ! sys ! ICSI ! Berkeley ! EDU
[Download RAW message or body]

Hi,

If you only want to monitor port 80, e.g., you can set a custom capture
filter. See, e.g.,
https://www.bro.org/documentation/faq.html#how-can-i-set-a-custom-capture-filter

Johanna

On Fri, Mar 18, 2016 at 10:13:08AM +0800, mz wrote:
> Dear
> 
>          I only want to monitor and capture http traffic, how to configure?
> 
> In addition, I found that when reading official manual picture below:
> 
>  
> 
>          
> 
> It will figure event where the configuration script engine
> 
>  
> 



> _______________________________________________
> Bro mailing list
> bro@bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

_______________________________________________
Bro mailing list
bro@bro-ids.org
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
[prev in list] [next in list] [prev in thread] [next in thread]