# Getting flow stats from Bro

**URL:** <https://community.zeek.org/t/getting-flow-stats-from-bro/4671>\
**Category:** Zeek\
**Created:** [February 15, 2017, 9:14pm UTC](https://community.zeek.org/t/getting-flow-stats-from-bro/4671 "2017-02-15T21:14:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jim\_Simpson](https://avatars.discourse-cdn.com/v4/letter/j/3da27b/32.png) [@Jim\_Simpson](https://community.zeek.org/u/Jim_Simpson)\
**Post date:** [February 15, 2017, 9:14pm UTC](https://community.zeek.org/t/getting-flow-stats-from-bro/4671/1 "2017-02-15T21:14:21Z")

</div>

Is there an existing set of scripts for Bro to get flow stats?

I’m looking for counts, avg, and std dev on small packets, large packets, nonempty packets, interarrival times, etc, similar to what YAF gives with the `--flow-stats` option. I’m also interested in the Shannon entropy of the payload, similar to what YAF gives with the `--entropy` option.  
[https://tools.netsa.cert.org/yaf/yaf.html](https://tools.netsa.cert.org/yaf/yaf.html)

- Jim

---

<div class="post-metadata">

**Author:** ![Vlad\_Grigorescu3](https://avatars.discourse-cdn.com/v4/letter/v/dec6dc/32.png) [@Vlad\_Grigorescu3](https://community.zeek.org/u/Vlad_Grigorescu3)\
**Post date:** [February 16, 2017, 4:15pm UTC](https://community.zeek.org/t/getting-flow-stats-from-bro/4671/2 "2017-02-16T16:15:35Z")

</div>

Not set of scripts for this that I'm aware of. The closest thing I'm  
aware of is this script for computing PCR, which might be a good  
jumping-off point at least:

[https://github.com/reservoirlabs/bro-producer-consumer-ratio](https://github.com/reservoirlabs/bro-producer-consumer-ratio)

&nbsp;&nbsp;--Vlad

Jim Simpson \<[jim.simpson.work@gmail.com](mailto:jim.simpson.work@gmail.com)\> writes:

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/getting-flow-stats-from-bro/4671/3 "2022-05-06T15:44:38Z")

</div>


