Bro是一个目前比较活跃的开源NIDS系统，差不多两年前我写过一个有关它特性的帖子。



Bro：一个开放源码的高级NIDS系统





由于Bro有一些其他开源NIDS所没有的高级特性（主要在于对策略脚本的支持），因此安装和配置上可能相对麻烦一些，这个帖子希望能提供一些有用的参考。



Bro的官方网站是：

http://www.bro-ids.org/



上面有基本的介绍信息和下载指示，网站的一些栏目内容还待完善中。相对Snort来说，使用Bro的人还是非常少的，因此Bro的邮件列表是一个得以获取帮助非常重要的资源，建议加入这个列表或经常浏览一下邮件列表的Web Archive，相关的信息在如下的链接：

http://www.bro-ids.org/mailing-list.html-Bro is a currently more active open source NIDS system, almost two years ago I wrote a post about its features. Bro: an open source advanced NIDS system due to some other open-source Bro NIDS does not have the advanced features (mainly due to the policy scr ipting support), so installation and configuration may be relatively trouble some, this post I hope to provide some useful reference . Bro' s official website is: http://www.bro-ids.org/ above basic introductory information and download instructions, some sites still to be perfected column content. Snort relatively speaking, people are still using very little Bro, so Bro mailing list to get help is a very important resource, it is recommended to join this list, or frequently visit the mailing list Web Archive, relevant information at the following link : http://www.bro-ids.org/mailing-list.html