[Bro] Bro state implementation
robin at icir.org
Tue Apr 1 11:40:41 PDT 2008
On Tue, Apr 01, 2008 at 16:27 +0530, you wrote:
> What is the behaviour of Bro when "suspend_processing" is called. What i
> have observed is Bro is buffering packets in suspended state.
No, it's not buffering packets, it just stops processing them (i.e.,
the kernel will drop packets once its internal buffers are
What are you using suspend_processing() for?
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro