# Intrusion prevention

**URL:** <https://community.zeek.org/t/intrusion-prevention/835>\
**Category:** Zeek\
**Created:** [August 18, 2005, 9:36pm UTC](https://community.zeek.org/t/intrusion-prevention/835 "2005-08-18T21:36:08Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Adayadil\_Thomas](https://avatars.discourse-cdn.com/v4/letter/a/b782af/32.png) [@Adayadil\_Thomas](https://community.zeek.org/u/Adayadil_Thomas)\
**Post date:** [August 18, 2005, 9:36pm UTC](https://community.zeek.org/t/intrusion-prevention/835/1 "2005-08-18T21:36:08Z")

</div>

Greetings.

Is there any plan to make Bro run in 'inline' mode as an IPS ?

Thanks

---

<div class="post-metadata">

**Author:** ![Jose\_M\_Gonzalez](https://avatars.discourse-cdn.com/v4/letter/j/edb3f5/32.png) [@Jose\_M\_Gonzalez](https://community.zeek.org/u/Jose_M_Gonzalez)\
**Post date:** [August 18, 2005, 11:07pm UTC](https://community.zeek.org/t/intrusion-prevention/835/2 "2005-08-18T23:07:59Z")

</div>

As part of my thesis work, I've instrumented Bro to work as IPS. (It  
just requires injecting back traffic after having analyzed it.)

-Chema

Adayadil Thomas wrote:

---

<div class="post-metadata">

**Author:** ![Harry\_Hoffman](https://avatars.discourse-cdn.com/v4/letter/h/6bbea6/32.png) [@Harry\_Hoffman](https://community.zeek.org/u/Harry_Hoffman)\
**Post date:** [August 19, 2005, 6:30am UTC](https://community.zeek.org/t/intrusion-prevention/835/3 "2005-08-19T06:30:25Z")

</div>

I don't really know what the plans are but I find that bro runs better as a application logger rather then something like snort. This is just my $0.02 so plz take it as such 🙂

Cheers,  
Harry

Adayadil Thomas wrote:

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:37pm UTC](https://community.zeek.org/t/intrusion-prevention/835/4 "2022-05-06T15:37:37Z")

</div>


