What is the difference between Snort and Bro?

While Bro and Snort and both open source intrusion detection systems, they use different methods to detect intrusions and can complement one another on the network.

Bro is the only other real open source network intrusion detection system supported by a significant community of users. Vern Paxson of the University of California at Berkeley is the lead developer. Bro is considered a specification-based network IDS. Bro uses a variety of protocol analysis modules to inspect traffic and make judgments regarding its conformance to various norms. It is actually a very powerful complement to Snort.

This was first published in January 2008

Dig deeper on Network security products, technologies, services

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

MicroscopeUK

SearchCloudProvider

SearchSecurity

SearchStorage

SearchNetworking

SearchCloudComputing

SearchConsumerization

SearchDataManagement

SearchBusinessAnalytics

Close