Key | Value |
---|---|
FileName | ./usr/bin/bro |
FileSize | 4234428 |
MD5 | 23D151F2766985541B1CE8800315A633 |
SHA-1 | 8E6C1C7A73C05AE1816065B10A39DAC079E21983 |
SHA-256 | 1379B193B44879E4BD53CB58FBF6DCD6D7B2BF571D6F44A5191DDFA1566571A7 |
SSDEEP | 98304:+XmpyRpYlqjgWMY2sR+MbpKr/3sdw3GxJS:Dq6lUg/xopKr/Qw |
TLSH | T105169D87FAC64C5DCDC9AE3A2BA36FD10531DE539094D42F604C4A1EAFD36E903662E4 |
hashlookup:parent-total | 1 |
hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileSize | 1750056 |
MD5 | DCF4573E10A7BEAD96A408AC8CF17936 |
PackageDescription | passive network traffic analyzer Bro is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting. . Bro comes with built-in functionality for a range of analysis and detection tasks, including detecting malware by interfacing to external registries, reporting vulnerable versions of software seen on the network, identifying popular web applications, detecting SSH brute-forcing, validating SSL certificate chains, among others. |
PackageMaintainer | Hilko Bengen <bengen@debian.org> |
PackageName | bro |
PackageSection | net |
PackageVersion | 2.5.5-1+b1 |
SHA-1 | BC998BD652B0BD5CA9AFF35C62FEBE9E7549B1AE |
SHA-256 | 35AEE6584F70DBE0AD9D70F321823681F3248CFE48B4A7DDEA602DBBB6953CEE |