Bro User Manual

Node: Install, Next: Bro Configuration, Previous: Download, Up: Installation and Configuration

Install

You'll need to collect the following information before beginning the installation.

localnets: a list of local subnets for your network. Bro needs to know which networks are "internal" and which are "external".
interface names: the names of the capture interfaces in your host (e.g. sk0 or en1). Use ifconfig -a to get the list of all network interfaces on your Bro host.

If you want to use Bro's periodic email report feature, you'll also need:

email list: a list of email addresses to send the reports to.
PGP keys: if you want to encrypt all email reports, the location of the GPG keyring of all recipients.

Bro is easy to install. Log in as root, and type:

     ./configure

or to install Bro in a location other than /usr/local/bro, use:

     ./configure --prefix=/path/to/bro

and then type:

     make
     make install

To update an existing Bro installation with new binaries and standard policy file, instead of "make install" do a "make update". This will preserve all your local customizations.

Also note that this documentation is installed in BROHOME/docs as both HTML and PDF versions.