Bro

Bro is an open-source network monitoring and intrusion detection system written in C++. Bro collects live packets via the libpcap interface, analyzes packet contents, generates events from the analysis, and performs various actions based on action policies. Possible actions include logging, email notifications, alert generation in database, and external command launches. Out of box, Bro comes with a variety of built-in analysis capabilities, such as detecting malware and security attacks from signature analysis, uncovering software vulnerabilities, inferring application protocols from network traffic, checking compliance status, etc. Beyond standard analysis functions, Bro is designed to perform any custom anomaly detection and system behavior analysis based on policy scripts written in a built-in scripting language. Bro supports distributed cluster deployment, where multiple Bro instances are front-ended by a load balancer and the Bro instances are controlled from a centralized Bro management and log aggregation interface.


  • Website: https://www.bro.org/
  • Platform: Linux, BSD, Mac OS X
  • License: BSD
  • Documentation: https://www.bro.org/documentation/index.html
  • Source repository: git
  • Community: mailing list bug tracker
  • Features: , , ,
  • Similar Software

    netdata netdata is a web-based, real-time performance monitoring system which visualizes the system resource usage of a local Linux server (which netdata is running on) via time-series statistics. Monitored s...
    Wireshark Wireshark is a GUI-based packet sniffing and analyzer tool which captures live packets from a network interface, dissect their protocols, and displays packet contents in human-readable format. Wiresh...
    Monit Monit is an open-source server monitoring and watchdog system for Linux and Unix. It allows system admins to custom-define various error conditions on server resources, such as missing processes, une...
    SmokePing SmokePing is an active network latency measurement tool written in Perl. SmokePing monitors round-trip-time delays, jitters, and packet loss rates against remote hosts over time, and shows historical...
    OSSEC OSSEC is an open-source host-based intrusion detection system written in C. In OSSEC, a centralized OSSEC manager stores events sent by the OSSEC agent deployed on individual hosts, and captures syste...

    Subscribe to Xmodulo List

    Do you want to receive posts about Linux applications and software recommended by Xmodulo List? Enter your email address below, and we will deliver our recommendations straight to your email box, for free. Delivery powered by Google Feedburner.

    Leave a comment

    Your email address will not be published. Required fields are marked *