This repository has been archived by the owner on Apr 16, 2021. It is now read-only.

securityonion-elsa-extras: add parser for Bro 2.4 kerberos.log #756

Closed

dougburks opened this issue Jun 19, 2015 · 4 comments

Contributor

dougburks commented Jun 19, 2015

https://www.bro.org/download/NEWS.bro.html

"Bro now has support for the Kerberos KRB5 protocol over TCP and UDP. Activity gets logged into kerberos.log."

Contributor Author

dougburks commented Aug 19, 2015

To create kerberos.log for testing:
sudo tcpreplay -ieth1 -M10 /opt/samples/.pcap /opt/samples/markofu/.pcap

Contributor Author

dougburks commented Aug 20, 2015

commits:

Security-Onion-Solutions/securityonion-elsa-extras@c53ba2f

Security-Onion-Solutions/securityonion-elsa-extras@882891f

Contributor Author

dougburks commented Aug 22, 2015

submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/fPWJbPBkIww/discussion

Contributor Author

dougburks commented Sep 12, 2015

Published:
http://blog.securityonion.net/2015/09/new-securityonion-elsa-extras-and.html

dougburks closed this as completed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.