Key | Value |
---|---|
FileName | ./usr/bin/bro |
FileSize | 4218060 |
MD5 | 51435BB542C4C714268A48BFB12597E0 |
SHA-1 | 68C6C4D4CA2A3C6282BD78BC41731256EE500792 |
SHA-256 | 1724B7EF9A702CF0282E4478F3F9E79CF8DEBBA855398D07F94A80AE5C84058B |
SSDEEP | 98304://kBy4zd+OfqotTFUB+bqOyDXZ3yTifEcwbWKxi:nWRp+/obUB+bqOyDXZXw |
TLSH | T16716AE83FAC54C6DCDC99D3B2BA79FD105329E13A094C46E904C4A1E9FE26ED07663E4 |
hashlookup:parent-total | 1 |
hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileSize | 1746036 |
MD5 | DCA06E164705F02718DC7F1188C047A6 |
PackageDescription | passive network traffic analyzer Bro is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting. . Bro comes with built-in functionality for a range of analysis and detection tasks, including detecting malware by interfacing to external registries, reporting vulnerable versions of software seen on the network, identifying popular web applications, detecting SSH brute-forcing, validating SSL certificate chains, among others. |
PackageMaintainer | Hilko Bengen <bengen@debian.org> |
PackageName | bro |
PackageSection | net |
PackageVersion | 2.5.2-1+b2 |
SHA-1 | 02D9025251B16744E91F56F40FB8C573FE8236AE |
SHA-256 | 2A50184F30D8A89C6CC52C44209204F7C9937296E87E76F3C9B82FBCFDC41AC2 |