Poll: Bro deployments

Hello Sites Using Bro,

We'd like to ask for your help. We're in the process of preparing a
major funding proposal for improving Bro, focused on: improving the
end-user experience (things like comprehensive documentation,
polishing rough edges, fixing bugs); and improving performance.

This looks like a potentially excellent opportunity. However, a
major element of winning the funding is convincingly demonstrating
to the funders that Bro is already well-established across a large &
diverse user community.

To develop that framing, we'd like to ask as many of you folks as
possible to fill out the small questionaire below. Please send the
replies to Robin personally, not to the list (just replying to this
mail should do the right thing). Assuming sufficient feedback, we'll
post an anonymized summary to the list.

(Of course we already know about many of you, but collecting this
information more systematically will allow us to put together a
better overall view of the Bro community.)

Thanks a lot in advance,

Vern and Robin

--------- Please send to robin@icir.org -----------------------------

1. Name of deployment site [optional]:

2. We are using Bro

    [ ] not yet, but we plan to
    [ ] experimentally
    [ ] operationally

3. We have done so for about _N_ years.

4. Our site is best described as

    [ ] Academia
    [ ] Research Lab
    [ ] Government
    [ ] Industry
    [ ] Other (please explain)

5. In its current use, Bro monitors about _N_ systems.

6. Would you be fine with us listing your site by name as a Bro user?

    [ ] Yes, however you wish.
    [ ] Yes in private to the funders in your grant application, but not publicly.
    [ ] No, please use this information only in an anonymized form.

7. Optionally, list up to three improvements you would like to see
    in the "Bro world":

Robin Sommer wrote:

Hello Sites Using Bro,

We'd like to ask for your help. We're in the process of preparing a
major funding proposal for improving Bro, focused on: improving the
end-user experience (things like comprehensive documentation,
polishing rough edges, fixing bugs); and improving performance.

This looks like a potentially excellent opportunity. However, a
major element of winning the funding is convincingly demonstrating
to the funders that Bro is already well-established across a large &
diverse user community.

To develop that framing, we'd like to ask as many of you folks as
possible to fill out the small questionaire below. Please send the
replies to Robin personally, not to the list (just replying to this
mail should do the right thing). Assuming sufficient feedback, we'll
post an anonymized summary to the list.

(Of course we already know about many of you, but collecting this
information more systematically will allow us to put together a
better overall view of the Bro community.)

Thanks a lot in advance,

Vern and Robin

--------- Please send to robin@icir.org -----------------------------

1. Name of deployment site [optional]: ForeTell Technologies Limited and two customer sites

2. We are using Bro

    [ ] not yet, but we plan to
    [X] experimentally
    [X] operationally

3. We have done so for about _3_ years.

4. Our site is best described as

    [ ] Academia
    [ ] Research Lab
    [ ] Government
    [X] Industry
    [X] Other (please explain) Customer Sites

5. In its current use, Bro monitors about _600_ systems.

6. Would you be fine with us listing your site by name as a Bro user?

    [ ] Yes, however you wish.
    [ ]] Yes in private to the funders in your grant application, but not publicly.
    [X] No, please use this information only in an anonymized form.

7. Optionally, list up to three improvements you would like to see
    in the "Bro world":

1) Better documentation
2) Guidance on best practices
3) Better Support for OpenBSD

Site: UT Austin TACC see www.tacc.utexas.edu

1. Name of deployment site [optional]:

General Electric

2. We are using Bro

    [X] not yet, but we plan to
    [ ] experimentally
    [ ] operationally

3. We have done so for about _1_ years.

4. Our site is best described as

    [ ] Academia
    [ ] Research Lab
    [ ] Government
    [X] Industry
    [ ] Other (please explain)

5. In its current use, Bro monitors about _N/A_ systems. In
production it could monitor over 300,000 systems.

6. Would you be fine with us listing your site by name as a Bro user?

    [ ] Yes, however you wish.
    [X] Yes in private to the funders in your grant application, but
not publicly.
    [ ] No, please use this information only in an anonymized form.

7. Optionally, list up to three improvements you would like to see
    in the "Bro world":

a. Documentation -- ideally we would like to see a book-length and
book-quality document explaining how to deploy and use Bro, from
beginner to advanced level.
b. Deployment assistance -- creating wizards or other interfaces that
guide a new installation to implement desired functionality.
c. User conferences -- gathering Bro users together to discuss how
they use the product, share leading practices, and form a community to
help advise requirements and development

Thank you,

Richard

Bro runs fine on OpenBSD. If you want to help, please test an updated
diff of bro that I sent on ports@ and feedback to me, thanks!

http://marc.info/?l=openbsd-ports&m=126295957409387&w=2

  Kevin