Latest news, tutorials, and insights from the Zeek community.
As we mentioned in our preceding blog posting, ICSI has been harvesting details about SSL connections and their contained certificates since the beginning of this year.We use the data to provide a notary service to the…
read more about The Tree of TrustToday, we are happy to publicly announce the ICSI Certificate Notary. This service provides near real-time reputation information on a large number of TLS/SSL certificates seen in the wild, collected continuously by Bro at several partner…
read more about Using the ICSI Certificate NotaryWe are very excited to release Bro 2.1 today. See the download page for the source code; binary packages will come soon. Bro 2.1 comes with extensive support for IPv6, tunnel decapsulation, a new input framework…
read more about Bro 2.1 ReleaseJust in time for the upcoming Bro Exchange, we are happy to announce a public beta of Bro 2.1. Head over to the download page to get the source. Bro 2.1 comes with extensive support for IPv6,…
read more about Bro 2.1 Public BetaThe Bro Exchange 2012 registration form has just been activated. This event is being organized rather quickly at this point, so please everyone register quickly and send in your presentation proposals to us at info@bro-ids.org. Bro…
read more about Bro Exchange 2012 Registration Form PostedWe have now finalized the dates for our upcoming Bro users meeting: the Bro Exchange 2012 will take place on August 7-8, 2012, at the National Center for Atmospheric Research (NCAR) in Boulder, Colorado. See this…
read more about Bro Exchange 2012: Dates finalizedBro now features a flexible input framework that allows users to import data into Bro. Data is either read into Bro tables or converted to events which can then be handled by scripts. The input framework…
read more about Upcoming: Loading Data into Bro with the Input FrameworkBro’s default ASCII log format is not exactly the most efficient way for storing and searching large volumes of data. An an alternative, Bro 2.1 will come with experimental support for DataSeries output, an efficient binary…
read more about Upcoming: Binary Output with DataSeriesUPDATE: We have finalized the dates: August 7-8, 2012. See the new Exchange 2012 web page for more information. Due to overwhelming demand for a user meeting instead of a workshop this year I’m pleased to…
read more about Announcing Bro Exchange 2012The upcoming Bro 2.1 release includes major improvements to its IPv6 support. IPv6 is enabled by default and no longer needs any special configuration. IPv6 has been fully integrated into all parts of Bro including protocol…
read more about Upcoming: Bro 2.1 IPv6 Support