# Poll: Bro deployments

**URL:** <https://community.zeek.org/t/poll-bro-deployments/1570>\
**Category:** Zeek\
**Created:** [January 19, 2010, 9:09pm UTC](https://community.zeek.org/t/poll-bro-deployments/1570 "2010-01-19T21:09:26Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [January 19, 2010, 9:09pm UTC](https://community.zeek.org/t/poll-bro-deployments/1570/1 "2010-01-19T21:09:26Z")

</div>

Hello Sites Using Bro,

We'd like to ask for your help. We're in the process of preparing a  
major funding proposal for improving Bro, focused on: improving the  
end-user experience (things like comprehensive documentation,  
polishing rough edges, fixing bugs); and improving performance.

This looks like a potentially excellent opportunity. However, a  
major element of winning the funding is convincingly demonstrating  
to the funders that Bro is already well-established across a large &  
diverse user community.

To develop that framing, we'd like to ask as many of you folks as  
possible to fill out the small questionaire below. Please send the  
replies to Robin personally, not to the list (just replying to this  
mail should do the right thing). Assuming sufficient feedback, we'll  
post an anonymized summary to the list.

(Of course we already know about many of you, but collecting this  
information more systematically will allow us to put together a  
better overall view of the Bro community.)

Thanks a lot in advance,

Vern and Robin

--------- Please send to [robin@icir.org](mailto:robin@icir.org) -----------------------------

1. Name of deployment site [optional]:

2. We are using Bro

&nbsp;&nbsp;&nbsp;&nbsp;[] not yet, but we plan to  
&nbsp;&nbsp;&nbsp;&nbsp;[] experimentally  
&nbsp;&nbsp;&nbsp;&nbsp;[] operationally

3. We have done so for about \_N\_ years.

4. Our site is best described as

&nbsp;&nbsp;&nbsp;&nbsp;[] Academia  
&nbsp;&nbsp;&nbsp;&nbsp;[] Research Lab  
&nbsp;&nbsp;&nbsp;&nbsp;[] Government  
&nbsp;&nbsp;&nbsp;&nbsp;[] Industry  
&nbsp;&nbsp;&nbsp;&nbsp;[] Other (please explain)

5. In its current use, Bro monitors about \_N\_ systems.

6. Would you be fine with us listing your site by name as a Bro user?

&nbsp;&nbsp;&nbsp;&nbsp;[] Yes, however you wish.  
&nbsp;&nbsp;&nbsp;&nbsp;[] Yes in private to the funders in your grant application, but not publicly.  
&nbsp;&nbsp;&nbsp;&nbsp;[] No, please use this information only in an anonymized form.

7. Optionally, list up to three improvements you would like to see  
&nbsp;&nbsp;&nbsp;&nbsp;in the "Bro world":

---

<div class="post-metadata">

**Author:** ![Vijay\_Sankar](https://avatars.discourse-cdn.com/v4/letter/v/858c86/32.png) [@Vijay\_Sankar](https://community.zeek.org/u/Vijay_Sankar)\
**Post date:** [January 19, 2010, 9:51pm UTC](https://community.zeek.org/t/poll-bro-deployments/1570/2 "2010-01-19T21:51:29Z")

</div>

Robin Sommer wrote:

> Hello Sites Using Bro,
> 
> We'd like to ask for your help. We're in the process of preparing a  
> major funding proposal for improving Bro, focused on: improving the  
> end-user experience (things like comprehensive documentation,  
> polishing rough edges, fixing bugs); and improving performance.
> 
> This looks like a potentially excellent opportunity. However, a  
> major element of winning the funding is convincingly demonstrating  
> to the funders that Bro is already well-established across a large &  
> diverse user community.
> 
> To develop that framing, we'd like to ask as many of you folks as  
> possible to fill out the small questionaire below. Please send the  
> replies to Robin personally, not to the list (just replying to this  
> mail should do the right thing). Assuming sufficient feedback, we'll  
> post an anonymized summary to the list.
> 
> (Of course we already know about many of you, but collecting this  
> information more systematically will allow us to put together a  
> better overall view of the Bro community.)
> 
> Thanks a lot in advance,
> 
> Vern and Robin
> 
> --------- Please send to robin@icir.org -----------------------------
> 
> 1. Name of deployment site [optional]: ForeTell Technologies Limited and two customer sites
> 
> 2. We are using Bro
> 
> &nbsp;&nbsp;&nbsp;&nbsp; not yet, but we plan to  
> &nbsp;&nbsp;&nbsp;&nbsp; experimentally  
> &nbsp;&nbsp;&nbsp;&nbsp; operationally
> 
> 3. We have done so for about \_3\_ years.
> 
> 4. Our site is best described as
> 
> &nbsp;&nbsp;&nbsp;&nbsp; Academia  
> &nbsp;&nbsp;&nbsp;&nbsp; Research Lab  
> &nbsp;&nbsp;&nbsp;&nbsp; Government  
> &nbsp;&nbsp;&nbsp;&nbsp; Industry  
> &nbsp;&nbsp;&nbsp;&nbsp; Other (please explain) Customer Sites
> 
> 5. In its current use, Bro monitors about \_600\_ systems.
> 
> 6. Would you be fine with us listing your site by name as a Bro user?
> 
> &nbsp;&nbsp;&nbsp;&nbsp; Yes, however you wish.  
> &nbsp;&nbsp;&nbsp;&nbsp;] Yes in private to the funders in your grant application, but not publicly.  
> &nbsp;&nbsp;&nbsp;&nbsp; No, please use this information only in an anonymized form.
> 
> 7. Optionally, list up to three improvements you would like to see  
> &nbsp;&nbsp;&nbsp;&nbsp;in the "Bro world":

1) Better documentation  
2) Guidance on best practices  
3) Better Support for OpenBSD

---

<div class="post-metadata">

**Author:** ![William\_Jones](https://avatars.discourse-cdn.com/v4/letter/w/8dc957/32.png) [@William\_Jones](https://community.zeek.org/u/William_Jones)\
**Post date:** [January 20, 2010, 10:49pm UTC](https://community.zeek.org/t/poll-bro-deployments/1570/3 "2010-01-20T22:49:26Z")

</div>

Site: UT Austin TACC see www.tacc.utexas.edu

---

<div class="post-metadata">

**Author:** ![Richard\_Bejtlich2](https://avatars.discourse-cdn.com/v4/letter/r/e480ec/32.png) [@Richard\_Bejtlich2](https://community.zeek.org/u/Richard_Bejtlich2)\
**Post date:** [January 21, 2010, 6:21pm UTC](https://community.zeek.org/t/poll-bro-deployments/1570/4 "2010-01-21T18:21:31Z")

</div>

1. Name of deployment site [optional]:

General Electric

2. We are using Bro

&nbsp;&nbsp;&nbsp;&nbsp;[X] not yet, but we plan to  
&nbsp;&nbsp;&nbsp;&nbsp;[] experimentally  
&nbsp;&nbsp;&nbsp;&nbsp;[] operationally

3. We have done so for about \_1\_ years.

4. Our site is best described as

&nbsp;&nbsp;&nbsp;&nbsp;[] Academia  
&nbsp;&nbsp;&nbsp;&nbsp;[] Research Lab  
&nbsp;&nbsp;&nbsp;&nbsp;[] Government  
&nbsp;&nbsp;&nbsp;&nbsp;[X] Industry  
&nbsp;&nbsp;&nbsp;&nbsp;[] Other (please explain)

5. In its current use, Bro monitors about \_N/A\_ systems. In  
production it could monitor over 300,000 systems.

6. Would you be fine with us listing your site by name as a Bro user?

&nbsp;&nbsp;&nbsp;&nbsp;[] Yes, however you wish.  
&nbsp;&nbsp;&nbsp;&nbsp;[X] Yes in private to the funders in your grant application, but  
not publicly.  
&nbsp;&nbsp;&nbsp;&nbsp;[] No, please use this information only in an anonymized form.

7. Optionally, list up to three improvements you would like to see  
&nbsp;&nbsp;&nbsp;&nbsp;in the "Bro world":

a. Documentation -- ideally we would like to see a book-length and  
book-quality document explaining how to deploy and use Bro, from  
beginner to advanced level.  
b. Deployment assistance -- creating wizards or other interfaces that  
guide a new installation to implement desired functionality.  
c. User conferences -- gathering Bro users together to discuss how  
they use the product, share leading practices, and form a community to  
help advise requirements and development

Thank you,

Richard

---

<div class="post-metadata">

**Author:** ![Kevin\_Lo](https://avatars.discourse-cdn.com/v4/letter/k/e95f7d/32.png) [@Kevin\_Lo](https://community.zeek.org/u/Kevin_Lo)\
**Post date:** [January 23, 2010, 10:16am UTC](https://community.zeek.org/t/poll-bro-deployments/1570/5 "2010-01-23T10:16:41Z")

</div>

Bro runs fine on OpenBSD. If you want to help, please test an updated  
diff of bro that I sent on ports@ and feedback to me, thanks!

[http://marc.info/?l=openbsd-ports&m=126295957409387&w=2](http://marc.info/?l=openbsd-ports&m=126295957409387&w=2)

&nbsp;&nbsp;Kevin

---

<div class="post-metadata">

**Author:** ![Blake\_Mattern](https://avatars.discourse-cdn.com/v4/letter/b/bc79bd/32.png) [@Blake\_Mattern](https://community.zeek.org/u/Blake_Mattern)\
**Post date:** [January 25, 2010, 5:38pm UTC](https://community.zeek.org/t/poll-bro-deployments/1570/6 "2010-01-25T17:38:39Z")

</div>



---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:39pm UTC](https://community.zeek.org/t/poll-bro-deployments/1570/7 "2022-05-06T15:39:00Z")

</div>


