[Bro] Bro as an IPS

[Slagell, Adam J]

Bro really isn't an IPS, and that breaks the model of how Bro works. That said in the future our work with netmap and SDN technologies could allow you to do such things. I could see Bro as controlling a SDN firewall for example. 

> On Jul 17, 2014, at 9:15 AM, "Dopheide, Jeannette M" <jdopheid at illinois.edu> wrote:
> 
> Po-Ching,
> 
> Unfortunately that forum is referencing old information from a previous
> generation of our site .  But I was able to dig this up using the Way Back
> Machine:
> 
> https://web.archive.org/web/20071029084731/http://www.bro-ids.org/bro-works
> hop-2007/slides/Bro-IPS.pdf
> 
> 
> Does this help answer your question?
> 
> Thanks,
> Jeannette
> 
> ------
> 
> Jeannette M. Dopheide
> Bro Outreach Coordinator
> National Center for Supercomputing Applications
> University of Illinois at Urbana-Champaign
> 
> 
> 
> 
> 
> 
>> On 7/16/14, 10:58 PM, "Po-Ching Lin" <pachinko.tw at gmail.com> wrote:
>> 
>> Dear Jeannette,
>> 
>>         It's 
>> http://comments.gmane.org/gmane.comp.security.detection.bro/2369
>> 
>> Best regards,
>> Po-Ching
>> 
>>> On 2014/7/17 02:01 AM, Dopheide, Jeannette M wrote:
>>> Hello Po-Ching,
>>> 
>>> Will you point me to the page you were on when you found the broken
>>> link?
>>> I'm not able to find this broken link.
>>> 
>>> Thanks,
>>> Jeannette
>>> 
>>> ------
>>> 
>>> Jeannette M. Dopheide
>>> Bro Outreach Coordinator
>>> National Center for Supercomputing Applications
>>> University of Illinois at Urbana-Champaign
>>> 
> 
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro