[Bro] Intrusion prevention

Vern Paxson vern at icir.org
Tue Aug 23 11:01:39 PDT 2005

> Is there any plan to make Bro run in 'inline' mode as an IPS ?

We're doing this as part of a DOE-sponsored project for coupling Bro with
custom hardware (per Chema's comments about his thesis work).  The resulting
design will support Bro running as a stand-alone IPS (i.e., without needing
the custom hardware), though that's not our near-term focus.


More information about the Bro mailing list