Zeek
Mixed VLAN tags and BPF syntax
This post contains a warning and a solution for anyone using BPF syntax when filtering traffic for network security monitoring.
Featured
Extending the value of network evidence: Introducing Performance and Asset Visibility
Corelight Performance and Asset Visibility unlocks SecOps and NetOps intelligence from one sensor, with device classification and anomaly-first...