how can evaluate bro

Zeek
1

hello Every One can some one tel me if there is an dataset or tool that allow me for evaluation of bro ids against new attack and technic evastion and also generation of false alert and the number of droped packet

2

Not sure if this may help

https://www.netresec.com/?page=PcapFiles

3

Hi,

hello Every One can some one tel me if there is an dataset or tool that
allow me for evaluation of bro ids against new attack and technic evastion
and also generation of false alert and the number of droped packet

I am not aware of anything - I think you are on yourself here. Have fun building it :slight_smile:

Also note that Bro mostly does not really do attack detection; by default the logs (mostly) only describe what happened on the networks without attaching any opinion to it. So - you probably also have to write the attack detection code yourself.

Johanna