Broccoli: The Bro Client Communications Library

This is documentation for release 0.8 of Broccoli, compatible with Bro IDS releases of 1.1 or newer. Broccoli is free software under terms of the BSD license as given in the License section. This documentation is always available on the web for download and online browsing at http://www.cl.cam.ac.uk/~cpk25/broccoli/.

Feedback, patches and bug reports are all welcome, please join the Bro mailing list or send feedback to the author at .

Yet Another SRG/ICIR Production — http://www.cl.cam.ac.uk/Research/SRGhttp://www.icir.org

Table of Contents
1. Introduction
1.1. What is Broccoli?
1.2. Why do I care?
2. Installing Broccoli
3. Using Broccoli
3.1. Obtaining information about your build using broccoli-config
3.2. Suggestions for instrumenting applications
3.3. The Broccoli API
3.3.1. Data types in Broccoli
3.3.2. Managing connections
3.3.3. Connection classes
3.3.4. Composing and sending events
3.3.5. Receiving events
3.3.6. Handling record objects
3.3.7. Associating data with connections
3.3.8. Configuration files
3.3.9. Using dynamic buffers
3.4. Configuring encrypted communication
3.5. Configuring event reception in Bro policies
3.6. Configuring debugging output
3.7. Test programs
4. Broccoli API Reference
broccoli -- 
A. Appendix
A.1. License
A.2. About this document