Hi, I was at Archcon last Friday and Liam Randall gave a great day-long training session. I was wondering where I could find the command bro-column he mentioned? We are going to upgrade to bro 2.3 soon (I assume it will be included there?) but in the meantime I’d like to have that tool available.


Brian Allen
Information Security Manager
Washington University

Thanks Brian.

It’s setup in the .bashrc on the training vm:

alias bro-column=“sed “s/fields.//;s/types.//” | column -s $’\t’ -t”