[Bro] Question about processing network traffic

Ren, Wenyu wren3 at illinois.edu
Tue Apr 14 15:20:19 PDT 2015

Dear all,

I have a very basic question about how bro Bro handles network traffic. I am doing some processing on each packet that Bro sees. If the processing time is longer than the packet arriving interval, will Bro block the new packet or buffer the new packet event and deal with it later? If it is buffered, will the event be dropped if the buffer is full?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150414/b51d16d4/attachment.html 

More information about the Bro mailing list