brolog

The Bro IDS is a phenomenal event driven network analysis system but interacting with the logs directly can be irritating. Even with the bro-cut tool, more effort is required than should be necessary, especially if you'd like to parse and interact with the logs within Ruby or some other language. While there are a few gems out there that parse specific Bro logs, brolog supports any arbitrary Bro log. This is absolutely Alpha software.