Here are the summarized results so far.
If you haven't replied yet, please do!
- Using Bro as the primary production network IDS for your site/group
4 (LBL, NERSC, NCSA, 1 small business net)
- Using Bro as the secondary production network IDS for your site/group
1
- Using Bro for off-line analysis for forensics, etc.
1
- Using Bro for traffic characterization studies only
2
- just playing around with Bro.
1
- currently just playing around with Bro, but hoping to use it in production soon
2
Other replies:
- using Bro as part of a NIDS product
- using Bro for research purposes