[Bro] Bro 2.5 CPU usage
dwdixon at umich.edu
Mon Nov 28 10:19:47 PST 2016
Would it be possible for someone quantify what a low bandwidth/low traffic
setup might be in terms of a bandwidth unit of measurement range where
Justin's patch would be advised to be used? I.E. Kbps/Mbps etc. What would
be a cut-off bandwidth/traffic rate value where it would not be advisable
that this patch be used?
On Fri, Nov 25, 2016 at 1:54 PM, Daniel Thayer <dnthayer at illinois.edu>
> Regarding broctl, you can disable the "not seeing any packets"
> warnings if you set this in your etc/broctl.cfg:
> StatsLogEnable = 0
> Doing so will also disable logging to broctl's stats.log (note:
> this is NOT the stats.log that Bro itself logs), which I'm
> guessing most people don't need anyway.
> On 11/25/16 11:43 AM, Michael Shirk wrote:
> > Is this something worthy of a feature request for low bandwidth setups?
> > In addition to something like this, I have to do a patch for very low
> > network traffic with bro cron reporting network traffic has stopped on
> > the monitoring interface.
> > --
> > Michael Shirk
> > Daemon Security, Inc.
> > http://www.daemon-security.com
> Bro mailing list
> bro at bro-ids.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro