# Question about Broker

**URL:** <https://community.zeek.org/t/question-about-broker/3588>\
**Category:** Zeek\
**Created:** [May 11, 2015, 8:07am UTC](https://community.zeek.org/t/question-about-broker/3588 "2015-05-11T08:07:08Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vito\_Logrillo](https://avatars.discourse-cdn.com/v4/letter/v/e9bcb4/32.png) [@Vito\_Logrillo](https://community.zeek.org/u/Vito_Logrillo)\
**Post date:** [May 11, 2015, 8:07am UTC](https://community.zeek.org/t/question-about-broker/3588/1 "2015-05-11T08:07:08Z")

</div>

Hello Bro Team,  
i've tried to use Broker without any result.  
Below what i've done:  
1. i've compiled bro source with ./configure --enable-broker option  
2. I've modified BrokerComm::connect() in printing-connector.bro: i've  
changed "127.0.0.1" to my listener ip  
3. ./bro -b printing-connector.bro  
4. I've configured the listener with netcat -l 9999  
5. netstat -ant on my bro machine

The last command shows an established connection between the bro  
machine and the listener, but there's no data exchange.  
What's wrong?  
Vito

---

<div class="post-metadata">

**Author:** ![Siwek\_Jon](https://avatars.discourse-cdn.com/v4/letter/s/90db22/32.png) [@Siwek\_Jon](https://community.zeek.org/u/Siwek_Jon)\
**Post date:** [May 11, 2015, 3:41pm UTC](https://community.zeek.org/t/question-about-broker/3588/2 "2015-05-11T15:41:24Z")

</div>

That seems ok to me: the TCP connection gets established, but a plain netcat listener doesn’t have any concept of broker data/messages/connection-handshake to be able to communicate in a meaningful way. Are you just doing this to troubleshoot some other connection problems? What are you expecting or trying to do?

- Jon

---

<div class="post-metadata">

**Author:** ![Vito\_Logrillo](https://avatars.discourse-cdn.com/v4/letter/v/e9bcb4/32.png) [@Vito\_Logrillo](https://community.zeek.org/u/Vito_Logrillo)\
**Post date:** [May 11, 2015, 3:57pm UTC](https://community.zeek.org/t/question-about-broker/3588/3 "2015-05-11T15:57:48Z")

</div>

Hi Jon,  
thanks for your reply.  
My final goal is the bro's log transmission from a node to a server: i  
think that Broker can be useful to my application, so i've tried to  
use the example code to understand better how it works.  
If i want to emulate a broker listener, which application can be used?  
Thanks,  
Vito

---

<div class="post-metadata">

**Author:** ![Siwek\_Jon](https://avatars.discourse-cdn.com/v4/letter/s/90db22/32.png) [@Siwek\_Jon](https://community.zeek.org/u/Siwek_Jon)\
**Post date:** [May 11, 2015, 4:25pm UTC](https://community.zeek.org/t/question-about-broker/3588/4 "2015-05-11T16:25:41Z")

</div>

Any application that integrates/uses the Broker library. So you can have a Bro process as the listener side since it uses Broker. You can also write your own C or C++ program using Broker’s API and start that up as the listener side.

- Jon

---

<div class="post-metadata">

**Author:** ![Vito\_Logrillo](https://avatars.discourse-cdn.com/v4/letter/v/e9bcb4/32.png) [@Vito\_Logrillo](https://community.zeek.org/u/Vito_Logrillo)\
**Post date:** [May 11, 2015, 5:01pm UTC](https://community.zeek.org/t/question-about-broker/3588/5 "2015-05-11T17:01:53Z")

</div>

Could you suggest me an application to test the protocol? I know, i can write my own app: however in this stage i’m much more interested to test the protocol and see if fits my needs.  
An “already done” application could be very helpful.  
Thanks,  
Vito

---

<div class="post-metadata">

**Author:** ![Siwek\_Jon](https://avatars.discourse-cdn.com/v4/letter/s/90db22/32.png) [@Siwek\_Jon](https://community.zeek.org/u/Siwek_Jon)\
**Post date:** [May 11, 2015, 6:00pm UTC](https://community.zeek.org/t/question-about-broker/3588/6 "2015-05-11T18:00:25Z")

</div>

Currently, I think the only thing using Broker is probably Bro since it’s so new and no one has really had a chance yet to make any other applications with it. My suggestion is still to either write your own program or use a Bro process to talk to another Bro process.

- Jon

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:42pm UTC](https://community.zeek.org/t/question-about-broker/3588/7 "2022-05-06T15:42:39Z")

</div>


