Next: , Previous: Analyzer-specific Files, Up: Bro Output


5.5 Tracefiles

Bro can be configured to output captured packets that look to be part of suspicious sessions. These files are in tcpdump format.