# XML-interface

**URL:** <https://community.zeek.org/t/xml-interface/2659>\
**Category:** Zeek\
**Created:** [April 26, 2013, 9:49am UTC](https://community.zeek.org/t/xml-interface/2659 "2013-04-26T09:49:05Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shabbir\_Ahmed](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@Shabbir\_Ahmed](https://community.zeek.org/u/Shabbir_Ahmed)\
**Post date:** [April 26, 2013, 9:49am UTC](https://community.zeek.org/t/xml-interface/2659/1 "2013-04-26T09:49:05Z")

</div>

Hi, I want to know a communication interface which i can use to recieve triggered messages from bro, bro has detected a malicious traffic and it sends me information via some xml-rpc or other means and then i do action of blocking the traffic.

please help,

Shabbir.

---

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [April 26, 2013, 2:21pm UTC](https://community.zeek.org/t/xml-interface/2659/2 "2013-04-26T14:21:39Z")

</div>

There's a library to exchange events with Bro:

&nbsp;&nbsp;&nbsp;&nbsp;[http://www.bro.org/documentation/components/broccoli/broccoli-manual.html](http://www.bro.org/documentation/components/broccoli/broccoli-manual.html)

Robin

---

<div class="post-metadata">

**Author:** ![Michael\_Brandeis](https://avatars.discourse-cdn.com/v4/letter/m/50afbb/32.png) [@Michael\_Brandeis](https://community.zeek.org/u/Michael_Brandeis)\
**Post date:** [April 26, 2013, 4:11pm UTC](https://community.zeek.org/t/xml-interface/2659/3 "2013-04-26T16:11:14Z")

</div>

That link is 404. This may be the right link now

[http://www.bro.org/sphinx/components/broccoli/README.html](http://www.bro.org/sphinx/components/broccoli/README.html)  
[http://www.bro.org/sphinx/components/broccoli/broccoli-manual.html](http://www.bro.org/sphinx/components/broccoli/broccoli-manual.html)  
[http://www.bro.org/sphinx/broccoli-api/broccoli\_8h.html](http://www.bro.org/sphinx/broccoli-api/broccoli_8h.html)

---

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [April 26, 2013, 5:04pm UTC](https://community.zeek.org/t/xml-interface/2659/4 "2013-04-26T17:04:08Z")

</div>

Correct. I actually pushed out a modified web site structure shortly  
after sending that mail, sorry about that.

Robin

---

<div class="post-metadata">

**Author:** ![Shabbir\_Ahmed](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@Shabbir\_Ahmed](https://community.zeek.org/u/Shabbir_Ahmed)\
**Post date:** [April 27, 2013, 1:38pm UTC](https://community.zeek.org/t/xml-interface/2659/5 "2013-04-27T13:38:28Z")

</div>

actually im trying to run bro on openwrt we have successfully ported bro to openwrt but will broccoli work on openwrt? has any one ported it to …?

---

<div class="post-metadata">

**Author:** ![Shabbir\_Ahmed](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@Shabbir\_Ahmed](https://community.zeek.org/u/Shabbir_Ahmed)\
**Post date:** [May 1, 2013, 6:57am UTC](https://community.zeek.org/t/xml-interface/2659/6 "2013-05-01T06:57:12Z")

</div>

actually im trying to run bro on openwrt we have successfully ported bro to openwrt but will broccoli work on openwrt? has any one ported it to …?

kindly help im running out of the time on a project. can any one help in porting it to openwrt or any other xml-rpc like interface that is available?

thank you,

Shabbir.

---

<div class="post-metadata">

**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\
**Post date:** [May 1, 2013, 12:00pm UTC](https://community.zeek.org/t/xml-interface/2659/7 "2013-05-01T12:00:15Z")

</div>

I suspect Broccoli should be very easy to build on openwrt.

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:40pm UTC](https://community.zeek.org/t/xml-interface/2659/8 "2022-05-06T15:40:57Z")

</div>


