This page is dedicated to all tools and toys that can help to make the usage of Bro easier. Whether you want to teach Bro, use Bro for teaching, teach yourself, or try something out "quickly" without harming your live system, this is the place to look for the right tool for your use case.
Try.Zeek
No login. No installation. No trouble.
Try.zeek is three things in one! It is a web-based scripting sandbox made freely available to users on try.zeek.org, the same URL hosts our interactive tutorial that introduces you step by step into the Bro scripting language. And third, you can install it yourself. The project is open source and available on GitHub.
For further information refer to our corresponding blog post.
Bro Teaching
Teaching Bro or using Bro as a teaching tool — this section is your starting point. We provide an index of our teaching materials here.
- An introduction to Bro
- An Introduction to Bro Scripting
- Building a Bro Cluster
- Bro Cluster Building
- File analysis with Bro by Bill Stackpole
- Bro Intel Framework
- Bro Logs
- Bro Presentation at Educause SPC 2014
- Bro4Pros 2016 Intro
- Config Framework
- Getting Traffic to your Cluster
- Bro File Analysis
- Bro SumStats Framework
- IPv6 and Tunnels
- A Bro Script Study
- Tools of the Trade
- Network Forensics with Bro
Bro ISLET
Bro ISLET is a sandbox system for modern IT teaching. The sandbox prevents your students, trainees, or future Bro professionals from harming a real system while learning. It enables use of Bro without installing Bro or virtualization software on the learner’s system. Just log in and start.
As an instructor you can host Bro Live! on your own server. See the ISLET github repository for more information and to retrieve the code.
Page Contents
Quick Links
- 13 February 2020: Ask the Zeeksperts - Aashish Sharma
- 18 February 2020 - Portland OR: Zeek Days Workshops
- 27 February 2020: Ask the Zeeksperts
- 7-9 October 2020 - Austin, Texas: ZeekWeek 2020
