How to Monitor Network Traffic with Virtualized Bro 2.51 on Ubuntu 16.04.2 on ESXi 6.5
ID: 9b6a4653-852c-53e5-a379-e33a91a91442
STIX ID: report--9b6a4653-852c-53e5-a379-e33a91a91442
Feed Name: Black Hills Infosec Blog
This blog-style guide provides a step-by-step walkthrough for deploying Bro (Zeek) on an Ubuntu 16.04 VM in a VMware ESXi environment, including ESXi vSwitch/port group configuration for mirrored traffic, setting the mirror NIC to promiscuous mode, compiling and installing PF_RING and Bro, configuring Bro's node.cfg to use pf_ring and the mirror interface, and enabling auto-start and periodic maintenance; the post begins with a disclaimer that some techniques may be outdated.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.