Using awk to analyze Bro logs by Mark Krenz

[@musicmansuperman]

Brilliant presentation. Best discussion on regular expressions I've heard.

[@wowgingermobile2123]

I see awk, I like.

[@Eskimoz]

Alors là, un gros bravo :)

[@Eskimoz]

On supporte !

[@tachiii06]

Have you shared the pcap files or these log files with the students?

[@markkrenz5899]

Not at this time. I am working towards that goal though of having sample logs available for download.

[@marcus.edmondson]

sakib janjua malware-traffic-analysis.net has some really good exercises and pcaps to run Bro against.

[@theBATfamiliar]

@@marcus.edmondsonThanks dude nice page for getting training data :)

[@JOHNSMITH-ve3rq]

The link is dead.

[@Zeekurity]

Here it is. Thanks for your patience! old.zeek.org/brocon2017/slides/awk_bro_logs.pdf

[@rohitgbal]

AWK Tutorials For Beginners: www.exsamplez.com/awk/

[@Zeekurity]

Thanks for your comment.