Key | Value |
---|---|
FileName | ./usr/bin/bro |
FileSize | 7473396 |
MD5 | 5FDC21296F34512D7CE4A80A83C96E06 |
SHA-1 | 839C3C9FAB32F75111DBACED52E4AB68407D6A0D |
SHA-256 | 9AD79683368B45F5DF8A67128C10636E0A6BCEF81012DA43C17F281CEB16B59D |
SSDEEP | 98304:DO2CybpuUOwA5r+xojljsYKRYQtZNvQpehJ08wc1UYFZ:ruUOHCiSlw0z |
TLSH | T1A3761A122720DF1DF294A87115738EE267B468A325E4C498927DF21C3E91E5F690FBF8 |
hashlookup:parent-total | 1 |
hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileSize | 1661192 |
MD5 | 4077E366F7FDC6E4D8C676F1A06DD45D |
PackageDescription | passive network traffic analyzer Bro is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting. . Bro comes with built-in functionality for a range of analysis and detection tasks, including detecting malware by interfacing to external registries, reporting vulnerable versions of software seen on the network, identifying popular web applications, detecting SSH brute-forcing, validating SSL certificate chains, among others. |
PackageMaintainer | Hilko Bengen <bengen@debian.org> |
PackageName | bro |
PackageSection | net |
PackageVersion | 2.5.5-1+deb10u1 |
SHA-1 | BA528D95B5113AAE61F90423717953D87388DF57 |
SHA-256 | 697CC6641F5A1541A28076B1C5DB51877CB927C0A6911B86915A01EF8287825C |