# Bro scripts to detect network attacks

**URL:** <https://community.zeek.org/t/bro-scripts-to-detect-network-attacks/3752>\
**Category:** Zeek\
**Created:** [August 6, 2015, 1:46am UTC](https://community.zeek.org/t/bro-scripts-to-detect-network-attacks/3752 "2015-08-06T01:46:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![user8](https://avatars.discourse-cdn.com/v4/letter/u/f1d935/32.png) [@user8](https://community.zeek.org/u/user8)\
**Post date:** [August 6, 2015, 1:46am UTC](https://community.zeek.org/t/bro-scripts-to-detect-network-attacks/3752/1 "2015-08-06T01:46:26Z")

</div>

Hello

I’m running Bro in my network, and I want to perform attacks to test its capabilities and create alert information.  
I choose to use SYN Flood Attack and ARP Spoofing Attack, can anyone tell me where to find these scripts?

Any help would be great. Thank You.

---

<div class="post-metadata">

**Author:** ![Max\_Feldman](https://avatars.discourse-cdn.com/v4/letter/m/f1d935/32.png) [@Max\_Feldman](https://community.zeek.org/u/Max_Feldman)\
**Post date:** [August 6, 2015, 6:15pm UTC](https://community.zeek.org/t/bro-scripts-to-detect-network-attacks/3752/2 "2015-08-06T18:15:08Z")

</div>

It looks like there’s a syn flood detection script here: [http://www.gnu-darwin.org/www001/src/ports/security/bro/work/bro-1.2.1/policy/synflood.bro](http://www.gnu-darwin.org/www001/src/ports/security/bro/work/bro-1.2.1/policy/synflood.bro)  
and an arp spoofing detection script here: [https://github.com/maxfeldman14/brospects/blob/master/arpspoof.bro](https://github.com/maxfeldman14/brospects/blob/master/arpspoof.bro)

But I’m not sure if there is anything more up-to-date.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:42pm UTC](https://community.zeek.org/t/bro-scripts-to-detect-network-attacks/3752/3 "2022-05-06T15:42:56Z")

</div>


