2
0
mirror of https://github.com/vimagick/dockerfiles.git synced 2025-12-30 17:47:21 +01:00
Files
dockerfiles_vimagick/bro/README.md
2015-06-22 15:35:21 +08:00

30 lines
620 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

`Bro` is a powerful system that on top of the functionality it provides out of
the box, also offers the flexibility to customize analysis pretty much
arbitrarily. We provide a range of documentation material ranging from
introductory material to get you started, to full references of Bros various
frameworks.
## docker-compose.yml
```
bro:
image: vimagick/bro
volumes:
- ./logs:/opt/bro/logs
environment:
- DEVICE=eth0
net: host
```
## up and running
```
$ cd ~/fig/bro/
$ docker-compose up -d
$ docker exec -it bro_bro_1 bash
>>> tail -n +1 -f http.log | bro-cut -d ts user_agent
>>> exit
```