NOTE: This collection of plugins is deprecated and no longer updated. We’re in the process of moving the plugins over to being maintained through the Bro Package Manager at https://github.com/bro/packages.

A Collection of Plugins for Bro

This repository contains a set of Bro plugins provided by the Bro Project, as well as plugins contributed by the Bro community.

These plugins are not part of a standard Bro installation, but can be built and installed separately (and individually). Please note that some might be experimental, and they generally also see less testing due to often depending on non-standard dependencies. Use at your own risk.

• elasticsearch - A log writer adding support for the Apache Lucene-based ElasticSearch database
• kafka - A log writer that sends logging output to Kafka
• myricom - A packet source providing native `Myricom SNF v3` support
• netmap - A packet source providing native netmap support
• pf_ring - A packet source providing native PF_RING support
• redis - A log writer adding support for a Redis backend

A few plugins are now hosted elsewhere:

• af_packet - A packet source providing native AF_Packet support on Linux. Now hosted at https://github.com/J-Gras/bro-af_packet-plugin
• postgresql - An experimental PostgreSQL reader/writer. Now hosted at https://github.com/0xxon/bro-postgresql
• tcprs - A TCP retransmission and network reordering analyzer. Now hosted at https://github.com/jswaro/tcprs

Please refer to the documentation for each plugin for information on installation and usage; refer to their COPYING files for licensing information. For more information and feedback, please see the MAINTAINER file for contact information.

The Bro plugins git repository is located at git://git.bro.org/bro-plugins.git. You can browse the repository here.