Broccoli: The Bro Client Communications Library
This is documentation for release 0.8 of Broccoli, compatible with Bro IDS releases of 1.1 or newer. Broccoli is free software under terms of the BSD license as given in the License section. This documentation is always available on the web for download and online browsing at http://www.cl.cam.ac.uk/~cpk25/broccoli/.
Feedback, patches and bug reports are all welcome, please
join the Bro mailing list
or send feedback to the author at
Yet Another SRG/ICIR Production — http://www.cl.cam.ac.uk/Research/SRG — http://www.icir.org
- Table of Contents
- 1. Introduction
- 1.1. What is Broccoli?
- 1.2. Why do I care?
- 2. Installing Broccoli
- 3. Using Broccoli
- 3.1. Obtaining information about your build using broccoli-config
- 3.2. Suggestions for instrumenting applications
- 3.3. The Broccoli API
- 3.3.1. Data types in Broccoli
- 3.3.2. Managing connections
- 3.3.3. Connection classes
- 3.3.4. Composing and sending events
- 3.3.5. Receiving events
- 3.3.6. Handling record objects
- 3.3.7. Associating data with connections
- 3.3.8. Configuration files
- 3.3.9. Using dynamic buffers
- 3.4. Configuring encrypted communication
- 3.5. Configuring event reception in Bro policies
- 3.6. Configuring debugging output
- 3.7. Test programs
- 4. Broccoli API Reference
- broccoli --
- A. Appendix
- A.1. License
- A.2. About this document