[Bro] Question on cutting down on number of conn.log entries
espressobeanies at gmail.com
Wed Mar 8 13:40:56 PST 2017
On Wed, Mar 8, 2017 at 2:22 PM, Azoff, Justin S <jazoff at illinois.edu> wrote:
> > On Mar 8, 2017, at 2:11 PM, Espresso Beanies <espressobeanies at gmail.com>
> > Hi,
> > I'm realizing my conn.log is eating up most of my performance and I'm
> trying to cut down the number of times Bro makes a duplicate entry in the
> conn.log file.
> What do you mean by duplicate entries? Are you seeing the same exact
> connection(same 5 tuple) logged multiple times?
> - Justin Azoff
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro