[Bro-Dev] #747: Scheduled event misfire

[Bro Tracker]

#747: Scheduled event misfire
----------------------+--------------------
  Reporter:  seth     |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro2.1
 Component:  Bro      |    Version:
Resolution:           |   Keywords:
----------------------+--------------------

Comment (by robin):

 On Tue, Jan 10, 2012 at 14:07 -0000, you wrote:

 >  If a scheduled event is scheduled in a bro_init handler it will fire
 the
 >  event really quickly at the beginning (much faster than a second)

 Yes, it fires immediately (more precisely: the next time timers are
 processed). It's not trivial to change iirc, but not impossible
 either.

 (It's even documented! From events.bif:

 {{{
     ##    When a ``bro_init`` handler executes, Bro has not yet seen any
 input packets
     ##    and therefore :bro:id:`network_time` is not  initialized yet. An
 artifact
     ##    of that is that any timer installed in a ``bro_init`` handler
 will fire
     ##    immediately with the first packet. The standard way to work
 around that is to
     ##    ignore the first time the timer fires and immediately
 reschedule.
 }}}

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/747#comment:0>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker