Jimmy Jones created BIT-1444:
--------------------------------
Summary: Connection logging for ESP
Key: BIT-1444
URL: https://bro-tracker.atlassian.net/browse/BIT-1444
Project: Bro Issue Tracker
Issue Type: New Feature
Components: Bro
Reporter: Jimmy Jones
I'd like to be able to track ESP (IPSec) connections in conn.log. Although ESP
is encrypted, the ability to track volumes and pattern of life etc would be
beneficial when doing intrusion analysis.
--
This message was sent by Atlassian JIRA
(v6.5-OD-08-001#65007)
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
