# Using Broccoli to config Bro agents remotely

**URL:** <https://community.zeek.org/t/using-broccoli-to-config-bro-agents-remotely/1156>\
**Category:** Zeek\
**Created:** [March 25, 2007, 4:09am UTC](https://community.zeek.org/t/using-broccoli-to-config-bro-agents-remotely/1156 "2007-03-25T04:09:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bach\_Hai\_Duong](https://avatars.discourse-cdn.com/v4/letter/b/f19dbf/32.png) [@Bach\_Hai\_Duong](https://community.zeek.org/u/Bach_Hai_Duong)\
**Post date:** [March 25, 2007, 4:09am UTC](https://community.zeek.org/t/using-broccoli-to-config-bro-agents-remotely/1156/1 "2007-03-25T04:09:36Z")

</div>

Hi all,

Do you ever use Broccoli to config, register or implement your own event handlers on remote Bro agents from the central one? Is there any docs or experiences on doing that?

Thanks,  
Bach Hai Duong

---

<div class="post-metadata">

**Author:** ![Christian\_Kreibich3](https://avatars.discourse-cdn.com/v4/letter/c/4af34b/32.png) [@Christian\_Kreibich3](https://community.zeek.org/u/Christian_Kreibich3)\
**Post date:** [April 5, 2007, 12:42am UTC](https://community.zeek.org/t/using-broccoli-to-config-bro-agents-remotely/1156/2 "2007-04-05T00:42:18Z")

</div>

Hi there,

apologies for the slow reply.

> Hi all,
> 
> Do you ever use Broccoli to config, register or implement your own  
> event handlers on remote Bro agents from the central one? Is there any  
> docs or experiences on doing that?

I'm not sure I understand, sorry, but I'll try to answer by pointing out  
a few related things that we currently can(not) do:

- First, if you are looking at Bro-Bro communication, then Broccoli is  
not of interest. Broccoli is used when you want to make a \*non-Bro\*  
entity talk to Bro. Broccoli also currently doesn't know how to  
serialize policy code (since non-Bro endpoints trypically won't know  
what to do with them).

- You can currently \*full\* configuration dumps of a Bro node and  
transfer this policy configuration + run-time state to another node. If  
this is what you want, then let us know and we'll clarify.

- You can not transfer policy code at the granularity of individual  
event handlers. While we can serialize them, the bit of infrastructure  
required to patch in such bits of code dynamically isn't currently there  
(unless I'm missing recent developments).

Hope that helps.

Cheers,  
Christian

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/using-broccoli-to-config-bro-agents-remotely/1156/3 "2022-05-06T15:38:13Z")

</div>