Next: Running Bro Up: The Bro 0.8 User Previous: Introduction Contents Index

#
Getting Started

This chapter gives an overview of how to get started with operating Bro: (i) compiling it, (ii) running it interactively, on live network traffic, and on recorded traces, (iii) how Bro locates the policy files it should evaluate and how to modify them, (iv) the arguments you can give it to control its operation, and (v) some helper utilities also distributed with Bro that you'll often find handy.

Subsections

- Running Bro
  - Building and installing Bro
    - Supported platforms
    - The Bro source code distribution
    - Installing Bro
    - Tuning BPF
  - Using Bro interactively
  - Specifying policy scripts
  - Running Bro on network traffic
    - Live traffic
    - Traffic traces
  - Modifying Bro policy
  - Bro flags and run-time environment
    - Flags
    - Run-time environment
- Helper utilities
  - Scripts
  - The hf utility
  - The cf utility