[Bro] pcap_next Question

Robin Sommer robin at icir.org
Thu Aug 9 15:23:42 PDT 2012

On Thu, Aug 09, 2012 at 06:43 -0400, Chris Crawford wrote:

> I don't think that is quite right for C++.

Yeah, it throws an exception by default. However, there's a way to
catch a failing new by setting a corresponding handler, see:


The funny thing is that I thought we did that already; and in fact
there's a function bro_new_handler() that reports an out of memory
error and aborts. However, we must have lost the call to the
corresponding set_new_handler() at some point: I don't find
bro_new_handler() used anywhere. So what we should do is add that back
in; I'll do that.


Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org

More information about the Bro mailing list