I installed bro on Ubuntu and Raspian in standalone mode and noticed that the default behaviour appears to be for bro to listen to port 47760 bound to the IN/6ADDR_ANY - I realise that it's possible to change the port with the BroPort option but there appears to be no way to change the address to which the port is bound - For a standalone installation binding to localhost would be far preferable as people probably don't want to unwittingly expose the broctl service on their machine. I realise people can firewall the port but it could be mentioned in the docs as to the security risks of not doing so.
Firstly it seems that the default for standalone should be to listen to localhost or use a unix domain socket. Secondly it would be handy if there was option to change address to which the port is bound so that it can be localhost or a specific interface.
Ubuntu 16.04.1 LTS, Raspian 8.0 (jessie)