Key | Value |
---|---|
FileName | ./usr/bin/bro |
FileSize | 4222172 |
MD5 | 07318F2342CB040B0BD271E6714851F3 |
SHA-1 | DB6E02BBBE166D26295C808357FF1615B8B212E6 |
SHA-256 | 71D0DC0229681BBDE178B2B58FAD831AD45105DDBC416C4CEC9DE3B4FFDCC543 |
SSDEEP | 98304:a5vGxcCpVLPSlGo3SEpq6xIRT4UjP8PwKd2HevKq:aGxJp6lzSdKuT4cP2wYP |
TLSH | T161169E47FAC55C5DCCC9AE3B2BA39FD10532DE139094C82E64484A1EAED3AED47263D4 |
hashlookup:parent-total | 1 |
hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileSize | 1747140 |
MD5 | 6022B0470CA9C6B027BAF200E2D3E404 |
PackageDescription | passive network traffic analyzer Bro is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting. . Bro comes with built-in functionality for a range of analysis and detection tasks, including detecting malware by interfacing to external registries, reporting vulnerable versions of software seen on the network, identifying popular web applications, detecting SSH brute-forcing, validating SSL certificate chains, among others. |
PackageMaintainer | Hilko Bengen <bengen@debian.org> |
PackageName | bro |
PackageSection | net |
PackageVersion | 2.5.5-1+b11 |
SHA-1 | 2996D66850CD3B2B89CFC038568DC4C81176207F |
SHA-256 | EE19EFEF017213162FBB703B1B3C24679FE586B7CC6702771BA32BEB32036747 |