[Bro] module creation
Johanna Amann
johanna at icir.org
Tue May 8 17:02:53 PDT 2018
Hi,
> 1/ Is there anything to do other than creating __load__ & main.bro files to
> make my module to work ?
It really depends what you are talking about here. If you are talking
about something that can be done purely in script-level, yes that's
basically it. If you want to distribute it using the Bro package manager
you also need to add a file with metainformation, but that is similarly
easy.
If you want to write a protocol parser you have to use C++ and things get
a bit more complex.
> 2/ if I want to use dpd with signature, the only thing that i have to do is
> to have my sig file in the module, isn't it?
And you have to load the signature file, e.g. in __load__.bro. But besides
that - yup.
Johanna
More information about the Bro
mailing list