[Bro] LogExpireInterval not respected?

Seth Hall seth at icir.org
Wed Feb 13 10:42:50 PST 2013

On Feb 13, 2013, at 12:55 PM, Jesse Bowling <jessebowling at gmail.com> wrote:

> That is my understanding. Anything built against PF_RING's libpcap can use the notation...However, now that I've put it out on the internet and it's not apparently common knowledge, I'm doubting myself... ;)
> As a reference, straight from (one of) the horses mouths: http://lists.ntop.org/pipermail/ntop-misc/2012-August/003128.html

And you are using the pf_ring aware drivers?


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list