danielguerra/bro-alpine-elasticsearch
bro 2.5 on alpine with elasticsearch plugin
Image
2
869
danielguerra/bro-alpine-elasticsearch repository overview
About
Bro-2.5 (git) on alpine linux with elasticsearch 2+ plugin. It was build with danielguerra/alpine-bro-build. The extracted size is 27M.
Usage
Elasticsearch:
docker run -d --name elasticsearch elasticsearch
This image:
docker run -ti --rm -v /Users/PCAP:/data/pcap --link elasticsearch:elasticsearch danielguerra/bro-alpine-elasticsearch
bro -r ../pcap/my.pcap
All logging goes to elasticsearch, there is no local log.
If you want a local log run the following from the bro-alpine-elasticsearch commandline
sed -i "s/default_writer = WRITER_NONE/default_writer = WRITER_ASCII/g" /usr/local/share/bro/base/frameworks/logging/main.bro
bro -r ../pcap/my.pcap
Tag summary
Content type
Image
Digest
Size
9.3 MB
Last updated
over 8 years ago
docker pull danielguerra/bro-alpine-elasticsearch