[ipv6hackers] ipv6 security events

Seth Hall seth at icir.org
Tue Oct 2 03:28:02 CEST 2012


On Sep 28, 2012, at 11:31 AM, Andre Cardoso <andrencardoso at gmail.com> wrote:

> anybody have experience in a SIEM with ipv6 capabilities?


Bro can be used for detection and correlation in many of the ways the people use SIEM deployments and the 2.1 release natively supports IPv6 quite well (although we've already discovered some small issues that we are working on correcting now).

	http://www.bro-ids.org/

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/




More information about the Ipv6hackers mailing list