Hi list,

I’m curious if anyone has had success with the new plugin structure (for the bro binary, not broctl plugins). Has anyone used it yet? If so, what have you done?


I started working on a RAR analyzer as a plugin recently. :wink:


I've used it, naturally. :slight_smile: The bro-plugins repository has all the
plugins I've implemented so far. There's also a set of unit tests in
testing/btest/plugins, which can serve as examples as well.

And it's easy to miss right now that there's some documentation on
writing plugins:
(that's not yet linked from anywhere, need to fix).