Press CTRL+K to open search

Bro FTP TQL queries

  • Published on Sep 9, 2026
  • 1 minute(s) read
Prev Next

The following TQL queries are Bro FTP queries.

Identify the most frequent FTP accounts
class:bro_ftp | groupby username 100
    Identify the most frequent FTP account and IP address pairs
    class:bro_ftp | groupby [username,srcipv4,dstipv4] 100
      Related articles
      • Bro HTTP TQL queries
        Helix Enterprise > Helix Enterprise TQL Reference Guide Release 2023.1 > TQL cheatsheet and use cases > Bro-specific TQL queries
      • Bro Conn TQL queries
        Helix Enterprise > Helix Enterprise TQL Reference Guide Release 2023.1 > TQL cheatsheet and use cases > Bro-specific TQL queries
      • Bro SSH TQL queries
        Helix Enterprise > Helix Enterprise TQL Reference Guide Release 2023.1 > TQL cheatsheet and use cases > Bro-specific TQL queries
      Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's standard dummy.
      Products
      Company
      Top Features
      Solutions
      Existing Users
      Connect With Us
      Sales and Support
      Copyright © Abc Inc. All Rights Reserved