Key | Value |
---|---|
FileName | ./usr/bin/bro |
FileSize | 5385508 |
MD5 | 29C5F90188B161AA6CA4E7599571F44A |
SHA-1 | 1057BF801E20C23A88763CD3B41D4F6CADC7554A |
SHA-256 | 57F6593E39B4838E4782AE268FE82D5531B190E318F048D0E3AA4B290093CDF7 |
SSDEEP | 98304:RuW3wCpVkvJlZZ2jn7ZsfJdDS70QmHkxkiySAwNQfWFL:R1F2RlujGzDOgHkkiyjwDd |
TLSH | T158463A47F480AA60CEC41B77F65E6798B2332B7AD0DA610789140728BFD75EB063B2D5 |
hashlookup:parent-total | 1 |
hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileSize | 1705640 |
MD5 | 9608D6BBD2078DAA79DEBD6B30AC650A |
PackageDescription | passive network traffic analyzer Bro is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting. . Bro comes with built-in functionality for a range of analysis and detection tasks, including detecting malware by interfacing to external registries, reporting vulnerable versions of software seen on the network, identifying popular web applications, detecting SSH brute-forcing, validating SSL certificate chains, among others. |
PackageMaintainer | Hilko Bengen <bengen@debian.org> |
PackageName | bro |
PackageSection | net |
PackageVersion | 2.5.5-1+deb10u1 |
SHA-1 | 150A43C6B5B6B40978221249E2A8149EF60E597C |
SHA-256 | E29D9F94057312EB71C2A57227C0EC08DD2A9BAC34DC9116A29C0022E3B8D00E |