/usr/share/bro/policy/protocols/ is in bro-common 2.5-1.
This file is owned by root:root, with mode 0o755.
..
/usr/share/bro/policy/protocols/conn/
/usr/share/bro/policy/protocols/conn/known-hosts.bro
/usr/share/bro/policy/protocols/conn/known-services.bro
/usr/share/bro/policy/protocols/conn/mac-logging.bro
/usr/share/bro/policy/protocols/conn/vlan-logging.bro
/usr/share/bro/policy/protocols/conn/weirds.bro
/usr/share/bro/policy/protocols/dhcp/
/usr/share/bro/policy/protocols/dhcp/known-devices-and-hostnames.bro
/usr/share/bro/policy/protocols/dns/
/usr/share/bro/policy/protocols/dns/auth-addl.bro
/usr/share/bro/policy/protocols/dns/detect-external-names.bro
/usr/share/bro/policy/protocols/ftp/
/usr/share/bro/policy/protocols/ftp/detect-bruteforcing.bro
/usr/share/bro/policy/protocols/ftp/detect.bro
/usr/share/bro/policy/protocols/ftp/software.bro
/usr/share/bro/policy/protocols/http/
/usr/share/bro/policy/protocols/http/detect-sqli.bro
/usr/share/bro/policy/protocols/http/detect-webapps.bro
/usr/share/bro/policy/protocols/http/detect-webapps.sig
/usr/share/bro/policy/protocols/http/header-names.bro
/usr/share/bro/policy/protocols/http/software-browser-plugins.bro
/usr/share/bro/policy/protocols/http/software.bro
/usr/share/bro/policy/protocols/http/var-extraction-cookies.bro
/usr/share/bro/policy/protocols/http/var-extraction-uri.bro
/usr/share/bro/policy/protocols/modbus/
/usr/share/bro/policy/protocols/modbus/known-masters-slaves.bro
/usr/share/bro/policy/protocols/modbus/track-memmap.bro
/usr/share/bro/policy/protocols/mysql/
/usr/share/bro/policy/protocols/mysql/software.bro
/usr/share/bro/policy/protocols/rdp/
/usr/share/bro/policy/protocols/rdp/indicate_ssl.bro
/usr/share/bro/policy/protocols/smb/
/usr/share/bro/policy/protocols/smb/__load__.bro
/usr/share/bro/policy/protocols/smb/dpd.sig
/usr/share/bro/policy/protocols/smb/files.bro
/usr/share/bro/policy/protocols/smb/main.bro
/usr/share/bro/policy/protocols/smb/smb1-main.bro
/usr/share/bro/policy/protocols/smb/smb2-main.bro
/usr/share/bro/policy/protocols/smtp/
/usr/share/bro/policy/protocols/smtp/blocklists.bro
/usr/share/bro/policy/protocols/smtp/detect-suspicious-orig.bro
/usr/share/bro/policy/protocols/smtp/entities-excerpt.bro
/usr/share/bro/policy/protocols/smtp/software.bro
/usr/share/bro/policy/protocols/ssh/
/usr/share/bro/policy/protocols/ssh/detect-bruteforcing.bro
/usr/share/bro/policy/protocols/ssh/geo-data.bro
/usr/share/bro/policy/protocols/ssh/interesting-hostnames.bro
/usr/share/bro/policy/protocols/ssh/software.bro
/usr/share/bro/policy/protocols/ssl/
/usr/share/bro/policy/protocols/ssl/expiring-certs.bro
/usr/share/bro/policy/protocols/ssl/extract-certs-pem.bro
/usr/share/bro/policy/protocols/ssl/heartbleed.bro
/usr/share/bro/policy/protocols/ssl/known-certs.bro
/usr/share/bro/policy/protocols/ssl/log-hostcerts-only.bro
/usr/share/bro/policy/protocols/ssl/notary.bro
/usr/share/bro/policy/protocols/ssl/validate-certs.bro
/usr/share/bro/policy/protocols/ssl/validate-ocsp.bro
/usr/share/bro/policy/protocols/ssl/weak-keys.bro