[Bro] how to get the oldest entry out of table
christian.kreibich at cl.cam.ac.uk
Mon Feb 7 15:20:02 PST 2005
On Mon, 2005-02-07 at 16:23 +0000, Christoph Göldi wrote:
> is vector a new type which is not documented in the bro ref manual?
not really new, but not well documented either. Check the CHANGES file.
> however, what you suggest doesn't solve my problem, because i have no
> chance to expire and delete each entry in the table individually. i can only
> delete all entries of one addr at the same time with the expire
> attribut for tables.
Maybe we could help you better if you explained your problem setting a
bit. It sounds like what you'd like to have is a priority queue instead
of a basic table with expiration timers?
More information about the Bro