[Bro] Broccoli and Intrusion Detection Exchange Format

Vern Paxson vern at icir.org
Wed Sep 14 14:11:18 PDT 2005

FYI, there are some hooks for IDMEF support within Bro itself (see #ifdef
USE_IDMEF), but it's not complete.  Broccoli doesn't have any IDMEF support,
and in fact I don't believe it would be a fit for it to do so - IDMEF is
for exchanging alerts, while Broccoli aims for exchanging events and typed
values, which are much more general.


More information about the Bro mailing list