Package: base/frameworks/packet-filterΒΆ

The packet filter framework supports how Bro sets its BPF capture filter.




This script supports how Bro sets its BPF capture filter. By default Bro sets a capture filter that allows all traffic. If a filter is set on the command line, that filter takes precedence over the default open filter and all filters defined in Bro scripts with the capture_filters and restrict_filters variables.


This script reports on packet loss from the various packet sources. When Bro is reading input from trace files, this script will not report any packet loss statistics.