Hi all,
Can anyone please help me out with Bro's architecture- based on their
own knowledge, or documentation or books or references available for
it.
I wish to understand the architecture at a high level of abstraction
and understand the various modules, their dependencies, what part of
the source code does what, where does the signature engine lie, where
is the anomaly engine, etc.
Thanks