Bro

Bro is an open-source network monitoring and intrusion detection system written in C++. Bro collects live packets via the libpcap interface, analyzes packet contents, generates events from the analysis, and performs various actions based on action policies. Possible actions include logging, email notifications, alert generation in database, and external command launches. Out of box, Bro comes with a variety of built-in analysis capabilities, such as detecting malware and security attacks from signature analysis, uncovering software vulnerabilities, inferring application protocols from network traffic, checking compliance status, etc. Beyond standard analysis functions, Bro is designed to perform any custom anomaly detection and system behavior analysis based on policy scripts written in a built-in scripting language. Bro supports distributed cluster deployment, where multiple Bro instances are front-ended by a load balancer and the Bro instances are controlled from a centralized Bro management and log aggregation interface.


  • Website: https://www.bro.org/
  • Platform: Linux, BSD, Mac OS X
  • License: BSD
  • Documentation: https://www.bro.org/documentation/index.html
  • Source repository: git
  • Community: mailing list bug tracker
  • Features: , , ,
  • Similar Software

    Cacti Cacti is an open-source network monitoring and visualization tool offering web-based interface. Cacti can be configured with poll-based simple network management protocol (SNMP) to collect time-serie...
    SmokePing SmokePing is an active network latency measurement tool written in Perl. SmokePing monitors round-trip-time delays, jitters, and packet loss rates against remote hosts over time, and shows historical...
    netdata netdata is a web-based, real-time performance monitoring system which visualizes the system resource usage of a local Linux server (which netdata is running on) via time-series statistics. Monitored s...
    Suricata Suricata is an open-source intrusion detection and prevention system (IDS/IPS) developed by the Open Information Security Foundation (OISF). It features a modularized and multi-threaded architecture ...
    OSSEC OSSEC is an open-source host-based intrusion detection system written in C. In OSSEC, a centralized OSSEC manager stores events sent by the OSSEC agent deployed on individual hosts, and captures syste...

    Subscribe to Xmodulo List

    Do you want to receive posts about Linux applications and software recommended by Xmodulo List? Enter your email address below, and we will deliver our recommendations straight to your email box, for free. Delivery powered by Google Feedburner.

    Leave a comment

    Your email address will not be published. Required fields are marked *