[Bro] Load Single Column Table with Input Framework
seth at icir.org
Wed Nov 6 11:00:29 PST 2013
On Nov 6, 2013, at 1:30 PM, anthony kasza <anthony.kasza at gmail.com> wrote:
> This is a bother when running Bro on trace files. Bro will finish processing a trace before reading in an entire table. One hack is to build the table in a separate file and @load it.
We also have the exit_only_after_terminate variable to prevent Bro from terminating automatically. You will have to manually kill it if you set this.
redef exit_only_after_terminate = T;
International Computer Science Institute
(Bro) because everyone has a network
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131106/606771e0/attachment.bin
More information about the Bro