Tuesday, November 29, 2016

Donate to The Bro Project



Bro Community,

As 2016 comes to a close, please consider adding The Bro Project to your list of charitable donations. We are managed by Software Freedom Conservancy, which is a 501(c)(3) organization and therefore exempt from US taxes.

To donate via credit card, click on the "Donate" button below, or go our site for more payment options:



If your commercial organization is considering sponsoring the Bro Project, you can find more information about it on our sponsorship page.

Thank you. And have a happy new year.

The Bro Project

Monday, November 28, 2016

New additions to the Bro Leadership Team

Last year when we announced The Bro Project had joined Software Freedom Conservancy we also announced the formation of Bro Leadership Team. The team consists of key contributors and community representatives working with SFC to set the direction of the project.

The Team has recently added two more members to the group: Johanna Amann and Martin van Hensbergen. As you may know, Johanna is a Bro developer and works on ICSI SSL Notary Service. Martin is a Threat and Malware analyst and the creator of the Bro (RFB)VNC parser.

Welcome Johanna and Martin, thank you for your contributions to the Bro Project!

The complete Leadership Team is now:
  • Johanna Amann, International Computer Science Institute 
  • Seth Hall, International Computer Science Institute
  • Keith Lehigh, Indiana University 
  • Vern Paxson, University of California at Berkeley
  • Michal Purzynski, Mozilla Foundation
  • Aashish Sharma, Lawrence Berkeley Lab 
  • Adam Slagell, National Center for Supercomputing Applications 
  • Robin Sommer, International Computer Science Institute
  • Martin van Hensbergen, Fox-IT

Monday, November 21, 2016

Bro4Pros 2017: February 2nd in San Francisco

Mark your calendars! Bro4Pros 2017 will be on Thursday, February 2nd in San Francisco, CA at Salesforce's Spear St. office (map).

Bro4Pros is a one-day workshop for advanced Bro users (i.e., those who use Bro on a daily basis, feel comfortable customizing its configuration, and have written scripts on their own).

This is a joined community effort and get-together, and the program will depend to a large degree on what people want to talk about. Attendance is limited to ensure an interactive and productive atmosphere.

We scheduled this year's workshop immediately after the Usenix Enigma conference to make travel a little more convenient for out-of-towners.

Registration is free and will open at 11am PST on Thursday, December 1st. Seats are limited and are first-come, first serve. If you have to cancel your registration please contact us to release your seat.

Call for presentations:

We have a few spots available for community presentations.

Send abstracts (max 500 words) to: info@bro.org
Subject: Bro4Pros 2017 Call for Presentations
Submission due date: January 6th, 2017

More details about the event can be found on our event page.

Thank you to Salesforce for sponsoring this event.

Thursday, November 17, 2016

Bro 2.5 released

We are very happy to announce the release of Bro v2.5. The new version is now available for download! Here is a brief summary of some of the new features and improvements:
  • Bro now includes the NetControl framework. This framework allows easy interaction with hard- and software switches, firewalls, etc. 
  • Support for the SMB protocol (SMB1 and SMB2), including GSSAPI and NTLM.
  • Support for the remote framebuffer protocol (RFB), that is used by VNC servers for remote graphical display.
  • The Intelligence framework was refactored and extended. It now supports, for example subnet indicators and item deletion/expiration.
See NEWS for release notes and CHANGES for the exhaustive commit list. Since the first beta version a series of smaller problems were fixed, in particular with the new SMB analyzer. We also added preliminary support for TLS 1.3. There were no significant changes anymore since the second beta version.

Bro 2.5 is currently available as source code, binary packages will come soon.

Thursday, November 3, 2016

Bro 2.5 Beta2

We are happy to announce that the second beta of Bro v2.5 is available for download. The main changes since the first beta are:
  • Lots of small fixes to the SMB analyzer. (Note that the analyzer is disabled by default)
  • Preliminary TLS 1.3 support.
  • Lots of other small fixes.
For a full list of changes see the CHANGES file. For information on the main features added in Bro v2.5, see our NEWS file and the earlier blog post.

Feedback is encouraged and should be sent to the Bro mailing list. As previously stated, we do not recommend using a beta release for production use.