[Bro] Software frontend

Seth Hall seth at icir.org
Fri Dec 10 12:17:30 PST 2010

On Dec 10, 2010, at 2:57 PM, Sunjeet Singh wrote:

> One can imagine a more optimal setting where event-analysis can be done locally and only the batched events are sent to the event-handler stage that runs on the cloud.

This is likely to just cause more overhead than it's worth.

> A cloud provider can have a Bro Instance

I can imagine doing this.  I may look into it at some point too.


More information about the Bro mailing list