You can get the latest public release of Bro from the Bro web page, http://www.bro-ids.org/. Bro is distributed as a gzip'd Unix tar archive, which you can unpack using:
or, on some Unix systems:gzcat +
tar-file| tar xf -
+tar zxf +
tar-file
This creates a subdirectory
+bro-+
XXX+-+
version,
where XXX is a tag such as pub for public releases and
priv for private releases, and version reflects a version
and possibly a subversion, such as 0.8a20
for version
0.8 and subversion a20.
To build Bro, change to the Bro directory and enter:
./configure
make
Fixme: Need to discuss configuration options here.
This will compile all of the Bro sources, including a version of the BIND DNS library, version 8, which Bro uses for its non-blocking DNS lookups.
Note: For Linux systems, you may need to use the header files in the linux-include/ subdirectory included in the Bro distribution to successfully compile Bro.