We are very happy to announce the release of Bro v2.5. The new version is now available for download! Here is a brief summary of some of the new features and improvements:

  • Bro now includes the NetControl framework. This framework allows easy interaction with hard- and software switches, firewalls, etc. 
  • Support for the SMB protocol (SMB1 and SMB2), including GSSAPI and NTLM.
  • Support for the remote framebuffer protocol (RFB), that is used by VNC servers for remote graphical display.
  • The Intelligence framework was refactored and extended. It now supports, for example subnet indicators and item deletion/expiration.

See NEWS for release notes and CHANGES for the exhaustive commit list. Since the first beta version a series of smaller problems were fixed, in particular with the new SMB analyzer. We also added preliminary support for TLS 1.3. There were no significant changes anymore since the second beta version.

Bro 2.5 is currently available as source code, binary packages will come soon.