Key | Value |
---|---|
FileName | ./usr/bin/bro |
FileSize | 6311592 |
MD5 | 62AEC43D8EAD327FFEA93F8D5DA4FEE4 |
SHA-1 | BF193C1407B00AA9ECF09A547F5F95D654CFCBFB |
SHA-256 | 841D2FE794459D4298D436FD7F593EDBEC6C41443C432E5107880E64028D3E62 |
SSDEEP | 98304:4tM/ocvzMPwQdPkMxC7l7WKgWkfMBstAHRCU/ySdHONlAZsEqMrJ/:rweavbxC5IXICU/ySdHOfAZa |
TLSH | T12A566D0BF9520CADC5D6C931037FA7F65A70B89E8131787F2844D6385E52EB45B2AFA0 |
hashlookup:parent-total | 1 |
hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileSize | 1992520 |
MD5 | 6BA0FCD30A39A432DCF85323DD2092A4 |
PackageDescription | passive network traffic analyzer Bro is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting. . Bro comes with built-in functionality for a range of analysis and detection tasks, including detecting malware by interfacing to external registries, reporting vulnerable versions of software seen on the network, identifying popular web applications, detecting SSH brute-forcing, validating SSL certificate chains, among others. |
PackageMaintainer | Hilko Bengen <bengen@debian.org> |
PackageName | bro |
PackageSection | net |
PackageVersion | 2.5.2-1+b1 |
SHA-1 | 3E894D1C8D80AD8D91114E3C1F12E64E37F010CF |
SHA-256 | FA0758F5AED97D492C53DC94C8F9D3CA3893CB5E2D31BE282A7CA66A21CF59EC |