Key | Value |
---|---|
FileName | ./usr/bin/bro |
FileSize | 8132240 |
MD5 | E370781F18DDD0C1B2B7AA45DC905970 |
SHA-1 | EF46F2F49F7B2996C215CDC05DBC2902387744AD |
SHA-256 | 62F6D780FAFBAE5DA870F1EF56F58A4059A96A2D4D4D2CB60446C232269F67C3 |
SSDEEP | 196608:OuQSQp8jYhXZABKlLno/TI6ABKOLJgfdpM4K9r3WCj68Hmu2dA:OpS/rM4K9DWCu8a |
TLSH | T1ED862953AF0C5E47E5F7CF350D3BE2B6022C3DA75155842ABE981B896A6B5CF0F42884 |
hashlookup:parent-total | 1 |
hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileSize | 1685552 |
MD5 | 178E97670B1D3DA79265656A41AA8D2B |
PackageDescription | passive network traffic analyzer Bro is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting. . Bro comes with built-in functionality for a range of analysis and detection tasks, including detecting malware by interfacing to external registries, reporting vulnerable versions of software seen on the network, identifying popular web applications, detecting SSH brute-forcing, validating SSL certificate chains, among others. |
PackageMaintainer | Hilko Bengen <bengen@debian.org> |
PackageName | bro |
PackageSection | net |
PackageVersion | 2.5.5-1+deb10u1 |
SHA-1 | 895D1112B8A8BABA65ECE685FC08293F63776AF5 |
SHA-256 | 5D8F9F21E0E89A89BC1CC5E43E87727A9FD2FF280CB2634875C19155B9A76273 |