[Bro] Question about processing network traffic
wren3 at illinois.edu
Tue Apr 14 15:20:19 PDT 2015
I have a very basic question about how bro Bro handles network traffic. I am doing some processing on each packet that Bro sees. If the processing time is longer than the packet arriving interval, will Bro block the new packet or buffer the new packet event and deal with it later? If it is buffered, will the event be dropped if the buffer is full?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro