robin at icir.org
Mon Dec 4 10:39:06 PST 2006
On Fri, Dec 01, 2006 at 16:27 -0800, Jim Mellander wrote:
> On an older version of Bro, the new_connection event was triggered
> immediately on receipt of the first packet, and the 'catch-and-release'
> mechanism worked correctly, now we seem to have this 5 second delay.
This might be an (unintentional) artifact of the connection
compressor. I'll look into it.
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org
LBNL/ICSI * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro