bro-scripts

This repository contains the Bro scripts I've written.

• Example output of syslog-outbound.bro script:

$ zcat 2013-*/notice*| grep Outbound | head -1
1377595970.788206 YI9hmdEIE46 31.2.42.8 10269 63.43.24.59 514 - - - udp SYSLOG::Detected_Outbound_Message Syslog message destined to non-local networks - 31.2.42.8 63.43.24.59 514

• Example output of ipmi.bro script:

$ zcat 2013-09-*/notice*| grep IPMI | head -1
1378045519.036048 C1lfYJ1t1ilC0NTOuf IPMI::Port_Detected Host 19.190.23.6 sent traffic to UDP port 623. ...