[Bro] Seeing packets

Seth Hall seth at icir.org
Wed Jun 19 09:11:46 PDT 2013

On Jun 13, 2013, at 2:09 PM, James Lay <jlay at slave-tothe-box.net> wrote:

> This is listening on my home LAN...so when it's not in use for 5 
> minutes, not uncommon, I'll see these.  Thanks for the response.

Ahhh.  This is another characteristic of Bro only being used on high volume networks.  I'm still hoping that before too much longer we'll have resources to be able to do a bit of a rewrite/rearchitecting of broctl where things like this would be addressed.

Thanks for reporting.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list