Hi, I want to know a communication interface which i can use to recieve triggered messages from bro, bro has detected a malicious traffic and it sends me information via some xml-rpc or other means and then i do action of blocking the traffic.
please help,
Shabbir.
There's a library to exchange events with Bro:
http://www.bro.org/documentation/components/broccoli/broccoli-manual.html
Robin
That link is 404. This may be the right link now
http://www.bro.org/sphinx/components/broccoli/README.html
http://www.bro.org/sphinx/components/broccoli/broccoli-manual.html
http://www.bro.org/sphinx/broccoli-api/broccoli_8h.html
Correct. I actually pushed out a modified web site structure shortly
after sending that mail, sorry about that.
Robin
actually im trying to run bro on openwrt we have successfully ported bro to openwrt but will broccoli work on openwrt? has any one ported it to …?
actually im trying to run bro on openwrt we have successfully ported bro to openwrt but will broccoli work on openwrt? has any one ported it to …?
kindly help im running out of the time on a project. can any one help in porting it to openwrt or any other xml-rpc like interface that is available?
thank you,
Shabbir.
I suspect Broccoli should be very easy to build on openwrt.
.Seth