This repository has been archived by the owner on Apr 16, 2021. It is now read-only.

securityonion-elsa-extras: add parser for Bro 2.4 mysql.log #755

Closed

dougburks opened this issue Jun 19, 2015 · 4 comments

Contributor

dougburks commented Jun 19, 2015

https://www.bro.org/download/NEWS.bro.html

"Bro now has support for the MySQL wire protocol. Activity gets logged into mysql.log."

Contributor Author

dougburks commented Aug 5, 2015

mysql pcap:
https://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=mysql_complete.pcap

need to fix checksums:
tcprewrite -i mysql_complete.pcap -o mysql.pcap -C

Contributor Author

dougburks commented Aug 6, 2015

commit:
Security-Onion-Solutions/securityonion-elsa-extras@42b5c9d

Contributor Author

dougburks commented Aug 22, 2015

submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/fPWJbPBkIww/discussion

Contributor Author

dougburks commented Sep 12, 2015

Published:
http://blog.securityonion.net/2015/09/new-securityonion-elsa-extras-and.html

dougburks closed this as completed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.