[Bro] module creation

Johanna Amann johanna at icir.org
Tue May 8 17:02:53 PDT 2018


Hi,

> 1/ Is there anything to do other than creating __load__ & main.bro files to
> make my module to work ?

It really depends what you are talking about here. If you are talking
about something that can be done purely in script-level, yes that's
basically it. If you want to distribute it using the Bro package manager
you also need to add a file with metainformation, but that is similarly
easy.

If you want to write a protocol parser you have to use C++ and things get
a bit more complex.

> 2/ if I want to use dpd with signature, the only thing that i have to do is
> to have my sig file in the module, isn't it?

And you have to load the signature file, e.g. in __load__.bro. But besides
that - yup.

Johanna


More information about the Bro mailing list