No description, website, or topics provided.
Bro
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
LICENSE Create __load__.bro Nov 1, 2016
README.md Create __load__.bro Nov 1, 2016
__load__.bro Create __load__.bro Nov 1, 2016
bro-pkg.meta Update bro-pkg.meta Nov 24, 2016
large_uploads.bro Create __load__.bro Nov 1, 2016

README.md

bro-large_uploads

Raises notices on any large uploads to the Internet and emails alerts on sufficiently large uploads if enabled.

Source must be a local net and destination must not be a local net.

Will also raise alerts on multiple large uploads seen from the same source IP in Y amount of time.

Endeavors to do an asynochronous reverse DNS lookup on source and destination IPs.