Content of RPM bro-2.2-4.1.x86_64.rpm :
/etc/bro
/etc/bro/broccoli.conf
/etc/bro/broctl.cfg
/etc/bro/networks.cfg
/etc/bro/node.cfg
/usr/bin/adtrace
/usr/bin/bro
/usr/bin/bro-cut
/usr/bin/broccoli-config
/usr/bin/broctl
/usr/bin/capstats
/usr/bin/ftwire2bro
/usr/bin/nfcollector
/usr/bin/rst
/usr/bin/trace-summary
/usr/lib/broctl
/usr/lib/broctl/BroControl
/usr/lib/broctl/BroControl/__init__.py
/usr/lib/broctl/BroControl/config.py
/usr/lib/broctl/BroControl/control.py
/usr/lib/broctl/BroControl/cron.py
/usr/lib/broctl/BroControl/doc.py
/usr/lib/broctl/BroControl/execute.py
/usr/lib/broctl/BroControl/install.py
/usr/lib/broctl/BroControl/node.py
/usr/lib/broctl/BroControl/options.py
/usr/lib/broctl/BroControl/plugin.py
/usr/lib/broctl/BroControl/pluginreg.py
/usr/lib/broctl/BroControl/util.py
/usr/lib/broctl/SubnetTree.py
/usr/lib/broctl/_SubnetTree.so
/usr/lib/broctl/_broccoli_intern.so
/usr/lib/broctl/broccoli.py
/usr/lib/broctl/plugins
/usr/lib/broctl/plugins/TestPlugin.py
/usr/lib/broctl/plugins/lb_myricom.py
/usr/lib/broctl/plugins/lb_pf_ring.py
/usr/lib/broctl/plugins/ps.py
/usr/lib/libbroccoli.so.5
/usr/lib/libbroccoli.so.5.1.0
/usr/share/bro
/usr/share/bro/base
/usr/share/bro/base/bif
/usr/share/bro/base/bif/__load__.bro
/usr/share/bro/base/bif/analyzer.bif.bro
/usr/share/bro/base/bif/bloom-filter.bif.bro
/usr/share/bro/base/bif/bro.bif.bro
/usr/share/bro/base/bif/broxygen.bif.bro
/usr/share/bro/base/bif/cardinality-counter.bif.bro
/usr/share/bro/base/bif/const.bif.bro
/usr/share/bro/base/bif/event.bif.bro
/usr/share/bro/base/bif/file_analysis.bif.bro
/usr/share/bro/base/bif/input.bif.bro
/usr/share/bro/base/bif/logging.bif.bro
/usr/share/bro/base/bif/plugins
/usr/share/bro/base/bif/plugins/Bro_ARP.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_AYIYA.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_BackDoor.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_BitTorrent.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_ConnSize.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_DCE_RPC.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_DHCP.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_DNP3.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_DNS.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_FTP.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_FTP.functions.bif.bro
/usr/share/bro/base/bif/plugins/Bro_File.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_FileExtract.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_FileExtract.functions.bif.bro
/usr/share/bro/base/bif/plugins/Bro_FileHash.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_Finger.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_GTPv1.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_Gnutella.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_HTTP.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_HTTP.functions.bif.bro
/usr/share/bro/base/bif/plugins/Bro_ICMP.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_IRC.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_Ident.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_InterConn.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_Login.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_Login.functions.bif.bro
/usr/share/bro/base/bif/plugins/Bro_MIME.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_Modbus.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_NCP.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_NTP.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_NetBIOS.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_NetBIOS.functions.bif.bro
/usr/share/bro/base/bif/plugins/Bro_NetFlow.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_PIA.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_POP3.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_RPC.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_SMB.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_SMTP.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_SMTP.functions.bif.bro
/usr/share/bro/base/bif/plugins/Bro_SOCKS.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_SSH.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_SSL.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_SSL.functions.bif.bro
/usr/share/bro/base/bif/plugins/Bro_SteppingStone.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_Syslog.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_TCP.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_TCP.functions.bif.bro
/usr/share/bro/base/bif/plugins/Bro_Teredo.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_UDP.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_Unified2.events.bif.bro
/usr/share/bro/base/bif/plugins/Bro_Unified2.types.bif.bro
/usr/share/bro/base/bif/plugins/Bro_ZIP.events.bif.bro
/usr/share/bro/base/bif/plugins/__load__.bro
/usr/share/bro/base/bif/reporter.bif.bro
/usr/share/bro/base/bif/strings.bif.bro
/usr/share/bro/base/bif/top-k.bif.bro
/usr/share/bro/base/bif/types.bif.bro
/usr/share/bro/base/files
/usr/share/bro/base/files/extract
/usr/share/bro/base/files/extract/__load__.bro
/usr/share/bro/base/files/extract/main.bro
/usr/share/bro/base/files/hash
/usr/share/bro/base/files/hash/__load__.bro
/usr/share/bro/base/files/hash/main.bro
/usr/share/bro/base/files/unified2
/usr/share/bro/base/files/unified2/__load__.bro
/usr/share/bro/base/files/unified2/main.bro
/usr/share/bro/base/frameworks
/usr/share/bro/base/frameworks/analyzer
/usr/share/bro/base/frameworks/analyzer/__load__.bro
/usr/share/bro/base/frameworks/analyzer/main.bro
/usr/share/bro/base/frameworks/cluster
/usr/share/bro/base/frameworks/cluster/__load__.bro
/usr/share/bro/base/frameworks/cluster/main.bro
/usr/share/bro/base/frameworks/cluster/nodes
/usr/share/bro/base/frameworks/cluster/nodes/manager.bro
/usr/share/bro/base/frameworks/cluster/nodes/proxy.bro
/usr/share/bro/base/frameworks/cluster/nodes/worker.bro
/usr/share/bro/base/frameworks/cluster/setup-connections.bro
/usr/share/bro/base/frameworks/communication
/usr/share/bro/base/frameworks/communication/__load__.bro
/usr/share/bro/base/frameworks/communication/main.bro
/usr/share/bro/base/frameworks/control
/usr/share/bro/base/frameworks/control/__load__.bro
/usr/share/bro/base/frameworks/control/main.bro
/usr/share/bro/base/frameworks/dpd
/usr/share/bro/base/frameworks/dpd/__load__.bro
/usr/share/bro/base/frameworks/dpd/main.bro
/usr/share/bro/base/frameworks/files
/usr/share/bro/base/frameworks/files/__load__.bro
/usr/share/bro/base/frameworks/files/main.bro
/usr/share/bro/base/frameworks/input
/usr/share/bro/base/frameworks/input/__load__.bro
/usr/share/bro/base/frameworks/input/main.bro
/usr/share/bro/base/frameworks/input/readers
/usr/share/bro/base/frameworks/input/readers/ascii.bro
/usr/share/bro/base/frameworks/input/readers/benchmark.bro
/usr/share/bro/base/frameworks/input/readers/binary.bro
/usr/share/bro/base/frameworks/input/readers/raw.bro
/usr/share/bro/base/frameworks/input/readers/sqlite.bro
/usr/share/bro/base/frameworks/intel
/usr/share/bro/base/frameworks/intel/__load__.bro
/usr/share/bro/base/frameworks/intel/cluster.bro
/usr/share/bro/base/frameworks/intel/input.bro
/usr/share/bro/base/frameworks/intel/main.bro
/usr/share/bro/base/frameworks/logging
/usr/share/bro/base/frameworks/logging/__load__.bro
/usr/share/bro/base/frameworks/logging/main.bro
/usr/share/bro/base/frameworks/logging/postprocessors
/usr/share/bro/base/frameworks/logging/postprocessors/__load__.bro
/usr/share/bro/base/frameworks/logging/postprocessors/scp.bro
/usr/share/bro/base/frameworks/logging/postprocessors/sftp.bro
/usr/share/bro/base/frameworks/logging/writers
/usr/share/bro/base/frameworks/logging/writers/ascii.bro
/usr/share/bro/base/frameworks/logging/writers/dataseries.bro
/usr/share/bro/base/frameworks/logging/writers/elasticsearch.bro
/usr/share/bro/base/frameworks/logging/writers/none.bro
/usr/share/bro/base/frameworks/logging/writers/sqlite.bro
/usr/share/bro/base/frameworks/notice
/usr/share/bro/base/frameworks/notice/__load__.bro
/usr/share/bro/base/frameworks/notice/actions
/usr/share/bro/base/frameworks/notice/actions/add-geodata.bro
/usr/share/bro/base/frameworks/notice/actions/drop.bro
/usr/share/bro/base/frameworks/notice/actions/email_admin.bro
/usr/share/bro/base/frameworks/notice/actions/page.bro
/usr/share/bro/base/frameworks/notice/actions/pp-alarms.bro
/usr/share/bro/base/frameworks/notice/cluster.bro
/usr/share/bro/base/frameworks/notice/extend-email
/usr/share/bro/base/frameworks/notice/extend-email/hostnames.bro
/usr/share/bro/base/frameworks/notice/main.bro
/usr/share/bro/base/frameworks/notice/non-cluster.bro
/usr/share/bro/base/frameworks/notice/weird.bro
/usr/share/bro/base/frameworks/packet-filter
/usr/share/bro/base/frameworks/packet-filter/__load__.bro
/usr/share/bro/base/frameworks/packet-filter/cluster.bro
/usr/share/bro/base/frameworks/packet-filter/main.bro
/usr/share/bro/base/frameworks/packet-filter/netstats.bro
/usr/share/bro/base/frameworks/packet-filter/utils.bro
/usr/share/bro/base/frameworks/reporter
/usr/share/bro/base/frameworks/reporter/__load__.bro
/usr/share/bro/base/frameworks/reporter/main.bro
/usr/share/bro/base/frameworks/signatures
/usr/share/bro/base/frameworks/signatures/__load__.bro
/usr/share/bro/base/frameworks/signatures/main.bro
/usr/share/bro/base/frameworks/software
/usr/share/bro/base/frameworks/software/__load__.bro
/usr/share/bro/base/frameworks/software/main.bro
/usr/share/bro/base/frameworks/sumstats
/usr/share/bro/base/frameworks/sumstats/__load__.bro
/usr/share/bro/base/frameworks/sumstats/cluster.bro
/usr/share/bro/base/frameworks/sumstats/main.bro
/usr/share/bro/base/frameworks/sumstats/non-cluster.bro
/usr/share/bro/base/frameworks/sumstats/plugins
/usr/share/bro/base/frameworks/sumstats/plugins/__load__.bro
/usr/share/bro/base/frameworks/sumstats/plugins/average.bro
/usr/share/bro/base/frameworks/sumstats/plugins/hll_unique.bro
/usr/share/bro/base/frameworks/sumstats/plugins/last.bro
/usr/share/bro/base/frameworks/sumstats/plugins/max.bro
/usr/share/bro/base/frameworks/sumstats/plugins/min.bro
/usr/share/bro/base/frameworks/sumstats/plugins/sample.bro
/usr/share/bro/base/frameworks/sumstats/plugins/std-dev.bro
/usr/share/bro/base/frameworks/sumstats/plugins/sum.bro
/usr/share/bro/base/frameworks/sumstats/plugins/topk.bro
/usr/share/bro/base/frameworks/sumstats/plugins/unique.bro
/usr/share/bro/base/frameworks/sumstats/plugins/variance.bro
/usr/share/bro/base/frameworks/tunnels
/usr/share/bro/base/frameworks/tunnels/__load__.bro
/usr/share/bro/base/frameworks/tunnels/main.bro
/usr/share/bro/base/init-bare.bro
/usr/share/bro/base/init-default.bro
/usr/share/bro/base/misc
/usr/share/bro/base/misc/find-checksum-offloading.bro
/usr/share/bro/base/misc/p0f.fp
/usr/share/bro/base/protocols
/usr/share/bro/base/protocols/conn
/usr/share/bro/base/protocols/conn/__load__.bro
/usr/share/bro/base/protocols/conn/contents.bro
/usr/share/bro/base/protocols/conn/inactivity.bro
/usr/share/bro/base/protocols/conn/main.bro
/usr/share/bro/base/protocols/conn/polling.bro
/usr/share/bro/base/protocols/dhcp
/usr/share/bro/base/protocols/dhcp/__load__.bro
/usr/share/bro/base/protocols/dhcp/consts.bro
/usr/share/bro/base/protocols/dhcp/dpd.sig
/usr/share/bro/base/protocols/dhcp/main.bro
/usr/share/bro/base/protocols/dhcp/utils.bro
/usr/share/bro/base/protocols/dnp3
/usr/share/bro/base/protocols/dnp3/__load__.bro
/usr/share/bro/base/protocols/dnp3/consts.bro
/usr/share/bro/base/protocols/dnp3/dpd.sig
/usr/share/bro/base/protocols/dnp3/main.bro
/usr/share/bro/base/protocols/dns
/usr/share/bro/base/protocols/dns/__load__.bro
/usr/share/bro/base/protocols/dns/consts.bro
/usr/share/bro/base/protocols/dns/main.bro
/usr/share/bro/base/protocols/ftp
/usr/share/bro/base/protocols/ftp/__load__.bro
/usr/share/bro/base/protocols/ftp/dpd.sig
/usr/share/bro/base/protocols/ftp/files.bro
/usr/share/bro/base/protocols/ftp/gridftp.bro
/usr/share/bro/base/protocols/ftp/info.bro
/usr/share/bro/base/protocols/ftp/main.bro
/usr/share/bro/base/protocols/ftp/utils-commands.bro
/usr/share/bro/base/protocols/ftp/utils.bro
/usr/share/bro/base/protocols/http
/usr/share/bro/base/protocols/http/__load__.bro
/usr/share/bro/base/protocols/http/dpd.sig
/usr/share/bro/base/protocols/http/entities.bro
/usr/share/bro/base/protocols/http/files.bro
/usr/share/bro/base/protocols/http/main.bro
/usr/share/bro/base/protocols/http/utils.bro
/usr/share/bro/base/protocols/irc
/usr/share/bro/base/protocols/irc/__load__.bro
/usr/share/bro/base/protocols/irc/dcc-send.bro
/usr/share/bro/base/protocols/irc/dpd.sig
/usr/share/bro/base/protocols/irc/files.bro
/usr/share/bro/base/protocols/irc/main.bro
/usr/share/bro/base/protocols/modbus
/usr/share/bro/base/protocols/modbus/__load__.bro
/usr/share/bro/base/protocols/modbus/consts.bro
/usr/share/bro/base/protocols/modbus/main.bro
/usr/share/bro/base/protocols/pop3
/usr/share/bro/base/protocols/pop3/__load__.bro
/usr/share/bro/base/protocols/pop3/dpd.sig
/usr/share/bro/base/protocols/smtp
/usr/share/bro/base/protocols/smtp/__load__.bro
/usr/share/bro/base/protocols/smtp/dpd.sig
/usr/share/bro/base/protocols/smtp/entities.bro
/usr/share/bro/base/protocols/smtp/files.bro
/usr/share/bro/base/protocols/smtp/main.bro
/usr/share/bro/base/protocols/socks
/usr/share/bro/base/protocols/socks/__load__.bro
/usr/share/bro/base/protocols/socks/consts.bro
/usr/share/bro/base/protocols/socks/dpd.sig
/usr/share/bro/base/protocols/socks/main.bro
/usr/share/bro/base/protocols/ssh
/usr/share/bro/base/protocols/ssh/__load__.bro
/usr/share/bro/base/protocols/ssh/dpd.sig
/usr/share/bro/base/protocols/ssh/main.bro
/usr/share/bro/base/protocols/ssl
/usr/share/bro/base/protocols/ssl/__load__.bro
/usr/share/bro/base/protocols/ssl/consts.bro
/usr/share/bro/base/protocols/ssl/dpd.sig
/usr/share/bro/base/protocols/ssl/main.bro
/usr/share/bro/base/protocols/ssl/mozilla-ca-list.bro
/usr/share/bro/base/protocols/syslog
/usr/share/bro/base/protocols/syslog/__load__.bro
/usr/share/bro/base/protocols/syslog/consts.bro
/usr/share/bro/base/protocols/syslog/main.bro
/usr/share/bro/base/protocols/tunnels
/usr/share/bro/base/protocols/tunnels/__load__.bro
/usr/share/bro/base/protocols/tunnels/dpd.sig
/usr/share/bro/base/utils
/usr/share/bro/base/utils/active-http.bro
/usr/share/bro/base/utils/addrs.bro
/usr/share/bro/base/utils/conn-ids.bro
/usr/share/bro/base/utils/dir.bro
/usr/share/bro/base/utils/directions-and-hosts.bro
/usr/share/bro/base/utils/exec.bro
/usr/share/bro/base/utils/files.bro
/usr/share/bro/base/utils/numbers.bro
/usr/share/bro/base/utils/paths.bro
/usr/share/bro/base/utils/patterns.bro
/usr/share/bro/base/utils/queue.bro
/usr/share/bro/base/utils/site.bro
/usr/share/bro/base/utils/strings.bro
/usr/share/bro/base/utils/thresholds.bro
/usr/share/bro/base/utils/time.bro
/usr/share/bro/base/utils/urls.bro
/usr/share/bro/broctl
/usr/share/bro/broctl/__load__.bro
/usr/share/bro/broctl/auto.bro
/usr/share/bro/broctl/check.bro
/usr/share/bro/broctl/main.bro
/usr/share/bro/broctl/process-trace.bro
/usr/share/bro/broctl/standalone.bro
/usr/share/bro/broxygen
/usr/share/bro/broxygen/__load__.bro
/usr/share/bro/broxygen/example.bro
/usr/share/bro/magic
/usr/share/bro/magic/animation
/usr/share/bro/magic/archive
/usr/share/bro/magic/assembler
/usr/share/bro/magic/audio
/usr/share/bro/magic/c-lang
/usr/share/bro/magic/cafebabe
/usr/share/bro/magic/commands
/usr/share/bro/magic/compress
/usr/share/bro/magic/database
/usr/share/bro/magic/diff
/usr/share/bro/magic/elf
/usr/share/bro/magic/epoc
/usr/share/bro/magic/filesystems
/usr/share/bro/magic/flash
/usr/share/bro/magic/fonts
/usr/share/bro/magic/fortran
/usr/share/bro/magic/frame
/usr/share/bro/magic/gimp
/usr/share/bro/magic/gnu
/usr/share/bro/magic/gnumeric
/usr/share/bro/magic/icc
/usr/share/bro/magic/iff
/usr/share/bro/magic/images
/usr/share/bro/magic/java
/usr/share/bro/magic/javascript
/usr/share/bro/magic/jpeg
/usr/share/bro/magic/kde
/usr/share/bro/magic/kml
/usr/share/bro/magic/linux
/usr/share/bro/magic/lisp
/usr/share/bro/magic/lua
/usr/share/bro/magic/m4
/usr/share/bro/magic/macintosh
/usr/share/bro/magic/mail.news
/usr/share/bro/magic/make
/usr/share/bro/magic/marc21
/usr/share/bro/magic/matroska
/usr/share/bro/magic/misctools
/usr/share/bro/magic/msdos
/usr/share/bro/magic/neko
/usr/share/bro/magic/pascal
/usr/share/bro/magic/pdf
/usr/share/bro/magic/perl
/usr/share/bro/magic/pgp
/usr/share/bro/magic/pkgadd
/usr/share/bro/magic/printer
/usr/share/bro/magic/python
/usr/share/bro/magic/riff
/usr/share/bro/magic/rpm
/usr/share/bro/magic/rtf
/usr/share/bro/magic/ruby
/usr/share/bro/magic/sc
/usr/share/bro/magic/sgml
/usr/share/bro/magic/sniffer
/usr/share/bro/magic/tcl
/usr/share/bro/magic/tex
/usr/share/bro/magic/troff
/usr/share/bro/magic/vorbis
/usr/share/bro/magic/warc
/usr/share/bro/magic/windows
/usr/share/bro/magic/wordprocessors
/usr/share/bro/magic/xwindows
/usr/share/bro/policy
/usr/share/bro/policy/frameworks
/usr/share/bro/policy/frameworks/communication
/usr/share/bro/policy/frameworks/communication/listen.bro
/usr/share/bro/policy/frameworks/control
/usr/share/bro/policy/frameworks/control/controllee.bro
/usr/share/bro/policy/frameworks/control/controller.bro
/usr/share/bro/policy/frameworks/dpd
/usr/share/bro/policy/frameworks/dpd/detect-protocols.bro
/usr/share/bro/policy/frameworks/dpd/packet-segment-logging.bro
/usr/share/bro/policy/frameworks/files
/usr/share/bro/policy/frameworks/files/detect-MHR.bro
/usr/share/bro/policy/frameworks/files/hash-all-files.bro
/usr/share/bro/policy/frameworks/intel
/usr/share/bro/policy/frameworks/intel/do_notice.bro
/usr/share/bro/policy/frameworks/intel/seen
/usr/share/bro/policy/frameworks/intel/seen/__load__.bro
/usr/share/bro/policy/frameworks/intel/seen/conn-established.bro
/usr/share/bro/policy/frameworks/intel/seen/dns.bro
/usr/share/bro/policy/frameworks/intel/seen/file-hashes.bro
/usr/share/bro/policy/frameworks/intel/seen/file-names.bro
/usr/share/bro/policy/frameworks/intel/seen/http-headers.bro
/usr/share/bro/policy/frameworks/intel/seen/http-url.bro
/usr/share/bro/policy/frameworks/intel/seen/smtp-url-extraction.bro
/usr/share/bro/policy/frameworks/intel/seen/smtp.bro
/usr/share/bro/policy/frameworks/intel/seen/ssl.bro
/usr/share/bro/policy/frameworks/intel/seen/where-locations.bro
/usr/share/bro/policy/frameworks/packet-filter
/usr/share/bro/policy/frameworks/packet-filter/shunt.bro
/usr/share/bro/policy/frameworks/signatures
/usr/share/bro/policy/frameworks/signatures/detect-windows-shells.sig
/usr/share/bro/policy/frameworks/software
/usr/share/bro/policy/frameworks/software/version-changes.bro
/usr/share/bro/policy/frameworks/software/vulnerable.bro
/usr/share/bro/policy/integration
/usr/share/bro/policy/integration/barnyard2
/usr/share/bro/policy/integration/barnyard2/__load__.bro
/usr/share/bro/policy/integration/barnyard2/main.bro
/usr/share/bro/policy/integration/barnyard2/types.bro
/usr/share/bro/policy/integration/collective-intel
/usr/share/bro/policy/integration/collective-intel/__load__.bro
/usr/share/bro/policy/integration/collective-intel/main.bro
/usr/share/bro/policy/misc
/usr/share/bro/policy/misc/app-stats
/usr/share/bro/policy/misc/app-stats/__load__.bro
/usr/share/bro/policy/misc/app-stats/main.bro
/usr/share/bro/policy/misc/app-stats/plugins
/usr/share/bro/policy/misc/app-stats/plugins/__load__.bro
/usr/share/bro/policy/misc/app-stats/plugins/facebook.bro
/usr/share/bro/policy/misc/app-stats/plugins/gmail.bro
/usr/share/bro/policy/misc/app-stats/plugins/google.bro
/usr/share/bro/policy/misc/app-stats/plugins/netflix.bro
/usr/share/bro/policy/misc/app-stats/plugins/pandora.bro
/usr/share/bro/policy/misc/app-stats/plugins/youtube.bro
/usr/share/bro/policy/misc/capture-loss.bro
/usr/share/bro/policy/misc/detect-traceroute
/usr/share/bro/policy/misc/detect-traceroute/__load__.bro
/usr/share/bro/policy/misc/detect-traceroute/detect-low-ttls.sig
/usr/share/bro/policy/misc/detect-traceroute/main.bro
/usr/share/bro/policy/misc/dump-events.bro
/usr/share/bro/policy/misc/known-devices.bro
/usr/share/bro/policy/misc/load-balancing.bro
/usr/share/bro/policy/misc/loaded-scripts.bro
/usr/share/bro/policy/misc/profiling.bro
/usr/share/bro/policy/misc/scan.bro
/usr/share/bro/policy/misc/stats.bro
/usr/share/bro/policy/misc/trim-trace-file.bro
/usr/share/bro/policy/protocols
/usr/share/bro/policy/protocols/conn
/usr/share/bro/policy/protocols/conn/known-hosts.bro
/usr/share/bro/policy/protocols/conn/known-services.bro
/usr/share/bro/policy/protocols/conn/weirds.bro
/usr/share/bro/policy/protocols/dhcp
/usr/share/bro/policy/protocols/dhcp/known-devices-and-hostnames.bro
/usr/share/bro/policy/protocols/dns
/usr/share/bro/policy/protocols/dns/auth-addl.bro
/usr/share/bro/policy/protocols/dns/detect-external-names.bro
/usr/share/bro/policy/protocols/ftp
/usr/share/bro/policy/protocols/ftp/detect-bruteforcing.bro
/usr/share/bro/policy/protocols/ftp/detect.bro
/usr/share/bro/policy/protocols/ftp/software.bro
/usr/share/bro/policy/protocols/http
/usr/share/bro/policy/protocols/http/detect-sqli.bro
/usr/share/bro/policy/protocols/http/detect-webapps.bro
/usr/share/bro/policy/protocols/http/detect-webapps.sig
/usr/share/bro/policy/protocols/http/header-names.bro
/usr/share/bro/policy/protocols/http/software-browser-plugins.bro
/usr/share/bro/policy/protocols/http/software.bro
/usr/share/bro/policy/protocols/http/var-extraction-cookies.bro
/usr/share/bro/policy/protocols/http/var-extraction-uri.bro
/usr/share/bro/policy/protocols/modbus
/usr/share/bro/policy/protocols/modbus/known-masters-slaves.bro
/usr/share/bro/policy/protocols/modbus/track-memmap.bro
/usr/share/bro/policy/protocols/smtp
/usr/share/bro/policy/protocols/smtp/blocklists.bro
/usr/share/bro/policy/protocols/smtp/detect-suspicious-orig.bro
/usr/share/bro/policy/protocols/smtp/entities-excerpt.bro
/usr/share/bro/policy/protocols/smtp/software.bro
/usr/share/bro/policy/protocols/ssh
/usr/share/bro/policy/protocols/ssh/detect-bruteforcing.bro
/usr/share/bro/policy/protocols/ssh/geo-data.bro
/usr/share/bro/policy/protocols/ssh/interesting-hostnames.bro
/usr/share/bro/policy/protocols/ssh/software.bro
/usr/share/bro/policy/protocols/ssl
/usr/share/bro/policy/protocols/ssl/cert-hash.bro
/usr/share/bro/policy/protocols/ssl/expiring-certs.bro
/usr/share/bro/policy/protocols/ssl/extract-certs-pem.bro
/usr/share/bro/policy/protocols/ssl/known-certs.bro
/usr/share/bro/policy/protocols/ssl/notary.bro
/usr/share/bro/policy/protocols/ssl/validate-certs.bro
/usr/share/bro/policy/tuning
/usr/share/bro/policy/tuning/__load__.bro
/usr/share/bro/policy/tuning/defaults
/usr/share/bro/policy/tuning/defaults/__load__.bro
/usr/share/bro/policy/tuning/defaults/extracted_file_limits.bro
/usr/share/bro/policy/tuning/defaults/packet-fragments.bro
/usr/share/bro/policy/tuning/defaults/warnings.bro
/usr/share/bro/policy/tuning/logs-to-elasticsearch.bro
/usr/share/bro/policy/tuning/track-all-assets.bro
/usr/share/bro/site
/usr/share/bro/site/local-manager.bro
/usr/share/bro/site/local-proxy.bro
/usr/share/bro/site/local-worker.bro
/usr/share/bro/site/local.bro
/usr/share/broctl
/usr/share/broctl/scripts
/usr/share/broctl/scripts/archive-log
/usr/share/broctl/scripts/broctl-config.sh
/usr/share/broctl/scripts/cflow-stats
/usr/share/broctl/scripts/check-config
/usr/share/broctl/scripts/crash-diag
/usr/share/broctl/scripts/create-link-for-log
/usr/share/broctl/scripts/delete-log
/usr/share/broctl/scripts/expire-logs
/usr/share/broctl/scripts/get-prof-log
/usr/share/broctl/scripts/helpers
/usr/share/broctl/scripts/helpers/cat-file
/usr/share/broctl/scripts/helpers/check-pid
/usr/share/broctl/scripts/helpers/df
/usr/share/broctl/scripts/helpers/exists
/usr/share/broctl/scripts/helpers/gdb-attach
/usr/share/broctl/scripts/helpers/get-childs
/usr/share/broctl/scripts/helpers/is-dir
/usr/share/broctl/scripts/helpers/rmdir
/usr/share/broctl/scripts/helpers/run-cmd
/usr/share/broctl/scripts/helpers/start
/usr/share/broctl/scripts/helpers/stop
/usr/share/broctl/scripts/helpers/to-bytes.awk
/usr/share/broctl/scripts/helpers/top
/usr/share/broctl/scripts/is-alive
/usr/share/broctl/scripts/local-interfaces
/usr/share/broctl/scripts/make-archive-name
/usr/share/broctl/scripts/post-terminate
/usr/share/broctl/scripts/postprocessors
/usr/share/broctl/scripts/postprocessors/summarize-connections
/usr/share/broctl/scripts/remove-link-for-log
/usr/share/broctl/scripts/run-bro
/usr/share/broctl/scripts/run-bro-on-trace
/usr/share/broctl/scripts/send-mail
/usr/share/broctl/scripts/set-bro-path
/usr/share/broctl/scripts/stats-to-csv
/usr/share/broctl/scripts/update
/usr/share/broctl/scripts/update-stats
/var/log/bro
/var/spool/bro
/var/spool/bro/broctl-config.sh
/var/spool/bro/tmp