# Blocking packets

**URL:** <https://community.zeek.org/t/blocking-packets/4289>\
**Category:** Zeek\
**Created:** [August 5, 2016, 3:36pm UTC](https://community.zeek.org/t/blocking-packets/4289 "2016-08-05T15:36:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Daniel\_Manzo](https://avatars.discourse-cdn.com/v4/letter/d/b5a626/32.png) [@Daniel\_Manzo](https://community.zeek.org/u/Daniel_Manzo)\
**Post date:** [August 5, 2016, 3:36pm UTC](https://community.zeek.org/t/blocking-packets/4289/1 "2016-08-05T15:36:23Z")

</div>

Hi all,

Can Bro block packets or part of traffic, in addition to logging? Or is this something that needs to be configured on an aggregator or tap? I apologize if this is a very simple topic, as I’m a Bro noob.

Best regards,

Daniel Manzo

---

<div class="post-metadata">

**Author:** ![johanna](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@johanna](https://community.zeek.org/u/johanna)\
**Post date:** [August 8, 2016, 5:07pm UTC](https://community.zeek.org/t/blocking-packets/4289/2 "2016-08-08T17:07:06Z")

</div>

Hello Daniel,

to interact with the traffic on your network, e.g. by installing blocking  
rules into your hardware, you can use the NetControl framework, which is  
part of our current development version and will be part of 2.5.  
Documentation is available at  
[https://www.bro.org/sphinx-git/frameworks/netcontrol.html](https://www.bro.org/sphinx-git/frameworks/netcontrol.html) and  
[https://github.com/bro/bro-netcontrol](https://github.com/bro/bro-netcontrol)

Apart from that, Bro by itself can not block traffic; it depends on  
outside hardware or software to do that, but it can be used to push rules  
out depending on the traffic that you see.

I hope that helps,  
Johanna

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/blocking-packets/4289/3 "2022-05-06T15:43:55Z")

</div>


