importing bro rules

Zeek
1

Hi,

Is there any way to use bro rules at an external program. I want to detect raw traffic anomalies/attacks and instead of installing Bro i wonder whether i can just use the rules and parse them to gather some information. Maybe there exists an already written solution?

Regards.

2

I believe you are misunderstanding Bro. Please give it a try instead of trying to avoid it. :slight_smile:

  .Seth