How To Install bro on CentOS 7

In this tutorial we learn how to install bro on CentOS 7. bro is A Network Intrusion Detection System and Analysis Framework

Introduction

In this tutorial we learn how to install bro on CentOS 7.

What is bro

Bro is an open-source, Unix-based Network Intrusion Detection System (NIDS) that passively monitors network traffic and looks for suspicious activity. Bro detects intrusions by first parsing network traffic to extract is application-level semantics and then executing event-oriented analyzers that compare the activity with patterns deemed troublesome. Its analysis includes detection of specific attacks (including those defined by signatures, but also those defined in terms of events) and unusual activities (e.g., certain hosts connecting to certain services, or patterns of failed connection attempts).

We can use yum or dnf to install bro on CentOS 7. In this tutorial we discuss both methods but you only need to choose one of method to install bro.

Install bro on CentOS 7 Using yum

Update yum database with yum using the following command.

sudo yum makecache

After updating yum database, We can install bro using yum by running the following command:

sudo yum -y install bro

Install bro on CentOS 7 Using dnf

If you don’t have dnf installed you can install DNF on CentOS 7 first. Update yum database with dnf using the following command.

sudo dnf makecache

After updating yum database, We can install bro using dnf by running the following command:

sudo dnf -y install bro

How To Uninstall bro on CentOS 7

To uninstall only the bro package we can use the following command:

sudo dnf remove bro

References

Summary

In this tutorial we learn how to install bro on CentOS 7 using yum and dnf.