Key | Value |
---|---|
FileName | ./usr/bin/bro |
FileSize | 4222172 |
MD5 | D1B5D3DBEFD991158D6E36EAC4FFFAC9 |
SHA-1 | F4DBE6CC6D311EDF2DEDFF766295C1758E9801E7 |
SHA-256 | 140669A227586B61F43300115E3552E03C7EFEBCBFF901FDA5A43D42917D52EF |
SSDEEP | 98304:C5bWiCpVLPSlGW7Zh6FRoiUjlOApXjsDww1Un03:i4p6lZ7tVlO6sMw |
TLSH | T1AB16AE43FAC55C6DCCC9AD3B2BA79FD00532DE139094C92E604C4A1EAED36E947663E4 |
hashlookup:parent-total | 1 |
hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileSize | 1746744 |
MD5 | 1BCFAAD48628399B1B3D14E61EB02936 |
PackageDescription | passive network traffic analyzer Bro is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting. . Bro comes with built-in functionality for a range of analysis and detection tasks, including detecting malware by interfacing to external registries, reporting vulnerable versions of software seen on the network, identifying popular web applications, detecting SSH brute-forcing, validating SSL certificate chains, among others. |
PackageMaintainer | Hilko Bengen <bengen@debian.org> |
PackageName | bro |
PackageSection | net |
PackageVersion | 2.5.5-1+deb10u1 |
SHA-1 | 669A2545162C9B36106A4500B9000E9ABB43B86C |
SHA-256 | 4F89DECE197F9FBFC4A65614357FA57575EB5EA87686C0E0A92EE1C4AA875DC8 |