Another networking type provided by Bro is addr
, corresponding to an
IP address. The only operations that can be performed on them are
comparisons for equality or inequality (also, a built-in function provides
masking, as discussed below).
When configuring the Bro distribution, if you specify --enable-brov6
then Bro will be built to support both IPv4 and IPv6 addresses,
and an addr
can hold either. Otherwise, addresses are
restricted to IPv4.