Skip to content


Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
A web interface for interacting with your Bro IDS logs.
Python JavaScript CSS
branch: flask-rewrite

This branch is 4 commits ahead, 7 commits behind master

Fetching latest commit…

Cannot retrieve the latest commit at this time

Failed to load latest commit information.

Brownian Build Status

Brownian is a web interface for viewing and interacting with Bro IDS logs. Try it out on a live demo.

Why Brownian?

Brownian motion relates to the elastic collisions and random motion of particles. Brownian aims to help you leverage Bro and ElasticSearch to make sense of a massive amount of seemingly random data.


This interface only works with Bro if you're using the new ElasticSearch Logging plugin.

Please refer to that documentation for getting ElasticSearch setup, and receiving logs.

It's also highly recommended to review the ElasticSearch configuration tips.


  • Python version 2.6 or 2.7.
  • Brownian comes with it's own webserver, for testing purposes.
  • For production use, Apache with mod_wsgi is recommended.

Virtualenv Setup

It is advised to run Brownian in a virtualenv - an isolated Python environment with its own set of libraries. This will prevent system upgrades from modifying the globally installed libraries and potentially breaking Brownian.

  1. Download the latest
  2. Create and switch to your environment:
$ python ./ Brownian
$ cd Brownian
$ source ./bin/activate


$ pip install git+

The files are installed in ./lib/python2.X/site-packages/Brownian.


  1. Change ELASTICSEARCH_SERVER in Brownian/lib/python2.X/site-packages/Brownian/ to your server's hostname and port.
  2. Change TIME_ZONE in to your desired timezone.
  3. Review the other settings at the top of and configure them as desired.

Running the Development Server

$ export DJANGO_SETTINGS_MODULE=Brownian.settings

In, modify the DATABASES setting to the path you'd like a small SQLite database created (your user will need write permissions to both the file and the parent directory).

$ python ./bin/ syncdb
$ python ./bin/ runserver

Running the Production Server with Apache

  1. Install mod_wsgi
  2. Edit BROWNIAN_PATH at the top of Brownian/lib/python2.X/site-packages/Brownian/ to the location of your virtualenv directory.
  3. In, modify the DATABASES setting to the path you'd like a small SQLite database created (your Apache user will need write permissions to both the file and the parent directory).
  4. To create the database, in your virtualenv, run DJANGO_SETTINGS_MODULE=Brownian.settings ./bin/ syncdb. You don't need to create any users.
  5. Edit your Apache config to include:
WSGIPassAuthorization on
WSGIScriptAlias "/Brownian" "/opt/Brownian/lib/python2.X/site-packages/Brownian/"

# Static content - CSS, Javascript, images, etc.
Alias /static/ /opt/Brownian/lib/python2.X/site-packages/Brownian/view/static/
<Directory /opt/Brownian/lib/python2.X/site-packages/Brownian/view/static>
  Order allow,deny
  Allow from all

# Optional - Permissions
<Directory /opt/Brownian/lib/python2.X/site-packages/Brownian>
Allow from ...
... Blah blah ...

Finally, restart Apache, and you should be good to go.

If you'd like to have your static files somewhere other than /static, change STATIC_URL in Please make sure to leave a trailing slash.

For more information, see:


If you see something that's broken, or something that you'd like added, please create an issue.

As always, fork, patch, and push away!

Something went wrong with that request. Please try again.