Broccoli: The Bro Client Communications Library

This is documentation for release 0.7.1 of Broccoli, compatible with Bro IDS releases of 0.9a7 or newer. Broccoli is free software under terms of the BSD license as given in the License section. This documentation is always available on the web for download and online browsing at http://www.cl.cam.ac.uk/~cpk25/broccoli/.

Feedback, patches and bug reports are all welcome, please join the Bro mailing list or send feedback to the author at .

Yet Another SRG/ICIR Production — http://www.cl.cam.ac.uk/Research/SRGhttp://www.icir.org

Table of Contents
1. Introduction
1.1. What is Broccoli?
1.2. Why do I care?
2. Installing Broccoli
3. Using Broccoli
3.1. The build environment
3.2. Suggestions for instrumenting applications
3.3. The Broccoli API
3.3.1. Data types in Broccoli
3.3.2. Managing connections
3.3.3. Composing and sending events
3.3.4. Handling record objects
3.3.5. Receiving events
3.3.6. Associating data with connections
3.3.7. Configuration files
3.3.8. Using dynamic buffers
3.4. Configuring encrypted communication
3.5. Configuring event reception in Bro policies
3.6. Configuring debugging output
3.7. Test programs
4. Broccoli API Reference
broccoli -- 
A. Appendix
A.1. License
A.2. About this document