Brocapi

HTTP API for mass-processing PCAPs through Bro IDS, tagging, and submitting the resulting logs to a syslog server. Brocapi consists of two parts… 1) A Flask API for receiving PCAPS via HTTP POST and queues a job in Redis via RQ, and 2) An RQ worker that receives the jobs queued from the API to process the PCAPs through Bro and submit the resulting logs to a syslog server.