The Bro team, the Lawrence Berkeley National Laboratory, and UC Berkeley are pleased to announce the Bro Workshop 2009, a 2.5-day Bro training event that will take place in Berkeley, CA, on Feb 10-12 2009.
The workshop is primarily targeted at site security personnel wishing to learn more about how Bro works, how to use its scripting language and how to generally customize the system based on a site's local policy.
Similar to the 2007 workshop, the agenda will be an informal mix of tutorial-style presentations and hands-on lab sessions. No prior knowledge about using Bro is assumed though attendees should be familiar with Unix shell usage as well as with typical networking tools like tcpdump and Wireshark.
All participants are expected to bring a Unix-based (Linux, Mac OS X, FreeBSD) laptop with a working Bro configuration. We will provide sample trace files to work with.
The 2009 workshop will be hosted by the Lawrence Berkeley National Lab. To facilitate a productive lab environment, the number of attendees will be limited to 30 people. A nominal registration fee of $50 will be charged.
As all our slots are filled already, the registration for the workshop is now closed.
The final agenda is here.
As indicated above, please bring a Unix-based laptop with Bro 1.4 preinstalled. At the very least, please make sure that Bro 1.4 configures & compiles without problems. Having everything in place will allow us to get going quickly.
We will provide wireless Internet access during the workshop.
The workshop will be located at UC Berkeley's Institute for Research on Labor and Employment (IRLE) on 2521 Channing Way, Berkeley, CA 94720.
Please note that the IRLE building opens at 9am to noon, and 1pm to 5. The IRLE front door is locked until 9am, and again from 12 to 1pm. During those times visitors will not gain entry to the building.
Directly across from IRLE building is a City of Berkeley parking lot. This is open to the public, and costs $1 per hour. It is called the "Anna Head West Lot". UCB parking permits are not accepted at this lot. There are also other public parking lots nearby, and there is a UC Berkeley parking lot at the corner of College and Channing Way, called the "Underhill lot". UCB Parking permits are accepted there.