[Bro] remote.bro

scott campbell scampbell at lbl.gov
Thu Sep 28 12:57:07 PDT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Christian Kreibich wrote:
> Hi Sandro,
> 
> start by reading remote.bro and the explanation of how to configure
> event communication in policies in the Broccoli documentation:
> 
>   http://www.bro-ids.org/broccoli/c85.html#AEN643
> 
> Sorry for the lack of documentation -- please do bug us if you can't get
> it to work.
> 
> On Sun, 2006-05-28 at 20:45 +0200, Sandro Reichert wrote:
>> Hi everybody!
>>
>> Where can I find a documentation about inter-bro communication? I can't 
>> find anything in the archive or the manuals.
>> I'm using bro 0.9a9, because there is a wireless edition developed at
>> Dresden University of Technology in Germany. I need the inter-bro 
>> communication to develop distributed policies.
>>
>> Thanks for all hints!
>>
>> Sandro
> 
> Cheers,
> Christian.


I have a few pages describing what you need to do to set up inter-bro
communication.  See:

http://www.nersc.gov/~scottc/software/bro/broToBro.html


There are several other pages regarding this functionality and some
basic policy scripts that can be found off my main page at:

http://www.nersc.gov/~scottc

Let me know if you have any problems with this.

thanks!

scott
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org

iD8DBQFFHCkTK2Plq8B7ZBwRAovXAKDFnP2jY5JiJw6B8+ryUd82W+EAHgCfW5r0
SX8rLRQ2YFrwPxMaZbd2IYA=
=Bu8z
-----END PGP SIGNATURE-----



More information about the Bro mailing list