# Process packets despite bad checksums.
redef ignore_checksums = T;
This will change significantly with Bro 2.2 when we have the file analysis
| # Plots GOES-13 Proton Flux for particles >= 10 Mev. | |
| # | |
| # Data source: ftp://ftp.swpc.noaa.gov/pub/lists/particle/ | |
| # | |
| # Check out http://stuffin.space to see where GOES-13 flies. | |
| library(dplyr) | |
| library(tidyr) | |
| library(lubridate) | |
| library(ggplot2) |
| #!/bin/sh | |
| # | |
| # Checks Maildir directories for new mail. For each new mail, it invokes | |
| # terminal-notifier to show a notification with the message From and Subject | |
| # header. | |
| # | |
| # The script can execute an arbitrary command when clicking on a notification, | |
| # e.g., open mutt: | |
| # | |
| # % cat open-mutt |
| library(dplyr) | |
| library(tidyr) | |
| library(ggplot2) | |
| parse_measurement_filename <- function(path) { | |
| filename <- strsplit(basename(path), "\\.")[[1]][1] | |
| s <- strsplit(filename, "_")[[1]] | |
| list(Cores=as.factor(s[1]), Run=as.factor(s[3]), Type=as.factor(s[5])) | |
| } |
| ### Keybase proof | |
| I hereby claim: | |
| * I am mavam on github. | |
| * I am mavam (https://keybase.io/mavam) on keybase. | |
| * I have a public key whose fingerprint is 8A3B 1323 B469 CCBA 54D3 3BCC D5E7 8DF5 9C8D 4B41 | |
| To claim this, I am signing this object: |
| #include <iostream> | |
| #include <vector> | |
| #include "vast/util/range.h" | |
| namespace util { | |
| template <typename Derived> | |
| class range | |
| { | |
| Derived& derived() |
| library(ggplot2) | |
| library(reshape) | |
| library(scales) | |
| # Computes the number of kB a basic bloom filter requires. | |
| # n: the number of elements to store | |
| # fp: the desired false positive rate | |
| space = function(n, fp) { -n * log(fp) / log(2)^2 / 8 / 1024 } | |
| N = 10^(1:9) |
| #!/bin/sh | |
| # Installs Bro on Redhat or Debian Linux. | |
| if [ "$(id -u)" -ne "0" ] ; then | |
| echo "must be root to install Bro" | |
| fi | |
| # Defaults | |
| flavor=redhat | |
| prefix=/opt/bro |
| @load base/frameworks/notice | |
| module Malware; | |
| export { | |
| redef enum Notice::Type += { | |
| ## Miniduke C&C activity. | |
| Miniduke_CC_Activity | |
| }; | |
| } |
| ##! | |
| ##! A Facebook analysis script. | |
| ##! | |
| ##! The script parses the HTTP body of Facebook JSON messages and reconstructs | |
| ##! a stream of chat messages from it. | |
| ##! | |
| ##! Since Facebook switched to HTTPS only, this script no longer works. You may | |
| ##! use it for inspiration or instructional purposes. | |
| ##! | |
| ##! For details, see my blog post: |