[Bro] Bro state implementation

Robin Sommer robin at icir.org
Tue Apr 1 11:40:41 PDT 2008

On Tue, Apr 01, 2008 at 16:27 +0530, you wrote:

> What is the behaviour of Bro when "suspend_processing" is called. What i
> have observed is Bro is buffering packets in suspended state.

No, it's not buffering packets, it just stops processing them (i.e.,
the kernel will drop packets once its internal buffers are

What are you using suspend_processing() for?


Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org

More information about the Bro mailing list