# Bro's evolutions **URL:** \ **Category:** Zeek\ **Created:** [September 5, 2006, 6:59pm UTC](https://community.zeek.org/t/bros-evolutions/1018 "2006-09-05T18:59:14Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Jean-Philippe\_Luigg2](https://avatars.discourse-cdn.com/v4/letter/j/aeb1de/32.png) [@Jean-Philippe\_Luigg2](https://community.zeek.org/u/Jean-Philippe_Luigg2)\ **Post date:** [September 5, 2006, 6:59pm UTC](https://community.zeek.org/t/bros-evolutions/1018/1 "2006-09-05T18:59:14Z")
Hello All, Several things : While i just sent a mail to Vern last week asking about the availability of the svn repository, i too agree with Christian, this access can bring its batch of problems so ... Another subject we spoke a few months ago (if not a year) : "Netflow" Let's imagine we would like having this used in "Bro", how doing this ? There're at least severals solutions : - Getting Netflow's flows coming directly inside Bro (turning it to be something likes a collector as flow-tools, nfcapd, etc.) - Use an external collector as one of those about which i speak above and let Bro getting informations from the data. In security, i like the principle of unicity so the second approach is better for me (an IDS is an IDS, not a Netflow's collector). So any advices, comments... Thank you. Best regards. ---
**Author:** ![Jim\_Mellander](https://avatars.discourse-cdn.com/v4/letter/j/e47c2d/32.png) [@Jim\_Mellander](https://community.zeek.org/u/Jim_Mellander)\ **Post date:** [September 8, 2006, 11:07pm UTC](https://community.zeek.org/t/bros-evolutions/1018/2 "2006-09-08T23:07:32Z")
LBL is running a netflow -\> bro conversion package for internal monitoring. In brief, we collect netflow records, parse them into Bro events, which are sent to a running Bro via the Brocolli library. If you're interested in working with this, great - it some help,as its a bit of a hack. I'll be happy to share what I'm doing... Jean-Philippe Luiggi wrote: ---
**Author:** ![Jean-Philippe\_Luigg2](https://avatars.discourse-cdn.com/v4/letter/j/aeb1de/32.png) [@Jean-Philippe\_Luigg2](https://community.zeek.org/u/Jean-Philippe_Luigg2)\ **Post date:** [September 12, 2006, 2:43pm UTC](https://community.zeek.org/t/bros-evolutions/1018/3 "2006-09-12T14:43:26Z")
> LBL is running a netflow -\> bro conversion package for internal > monitoring. In brief, we collect netflow records, parse them into Bro > events, which are sent to a running Bro via the Brocolli library. If > you're interested in working with this, great - it some help,as its a > bit of a hack. I'll be happy to share what I'm doing...   Hello Jim,      Thank you for this information, i'll be happy using your software as it's   exactly what i was looking for.   Best regards. ---
**Author:** ![Jim\_Mellander](https://avatars.discourse-cdn.com/v4/letter/j/e47c2d/32.png) [@Jim\_Mellander](https://community.zeek.org/u/Jim_Mellander)\ **Post date:** [September 12, 2006, 11:35pm UTC](https://community.zeek.org/t/bros-evolutions/1018/4 "2006-09-12T23:35:58Z")
I've had a couple of requests for this code, so I'm developing a web page for it. Stay tuned. Jean-Philippe Luiggi wrote: ---
**Author:** ![Jean-Philippe\_Luigg2](https://avatars.discourse-cdn.com/v4/letter/j/aeb1de/32.png) [@Jean-Philippe\_Luigg2](https://community.zeek.org/u/Jean-Philippe_Luigg2)\ **Post date:** [September 13, 2006, 2:04pm UTC](https://community.zeek.org/t/bros-evolutions/1018/5 "2006-09-13T14:04:56Z")
Hello, No problem, thank you a lot. Best regards. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:37pm UTC](https://community.zeek.org/t/bros-evolutions/1018/6 "2022-05-06T15:37:57Z")
Closed on May 6, 2022, 3:37pm UTC