[Bro] Bro state implementation
surya.t at gmail.com
Wed Apr 2 21:21:46 PDT 2008
>No, it's not buffering packets, it just stops processing them (i.e.,
>the kernel will drop packets once its internal buffers are
Once its resumed will the buffered packets processed by Bro ?.
In our case we doesn't want this.
Is it possible to stop capturing the packets at libpcap level and
later resume capturing the packets with out libpcap initialization.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro