Looks like it wouldn't be too difficult to add bitwise operators that work on integral types (int and count) -- I modified the bro source to add '&', '^', '<<', and '>>'. I had some clash with '|' due to it being used in other places (and there's probably numerous other bugs since I'm not much of a lex/yacc expert) but it seems like something that'd be do-able.

On Wed, May 21, 2014 at 3:01 PM, Kyle Creyts <kyle.creyts@gmail.com> wrote:
Shifts would be nice too.

On Wed, May 21, 2014 at 7:15 AM, M K <mkhan04@gmail.com> wrote:
> Looking through the archives, it looks like this has come up, but I'll ask
> it again since doesn't look like it's been asked recently. Does bro support
> bitwise operations such as 'and', 'or', and 'xor' ?
> _______________________________________________
> Bro mailing list
> bro@bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

Kyle Creyts

Information Assurance Professional
Founder BSidesDetroit