[Bro] BroControl config to delete instead of archive on rotation

Azoff, Justin S jazoff at illinois.edu
Fri May 26 08:08:40 PDT 2017

> On May 26, 2017, at 11:06 AM, Josh Liburdi <liburdi.joshua at gmail.com> wrote:
> Thanks for the feedback everyone. 
> Somewhat on this topic, have you guys ever thought about adding a socket writer (logging via the network) to Bro? That would be the most efficient way of minimizing disk I/O.

I've been meaning to write a ZMQ writer and an Exec writer (that you could just use to run something like netcat).

- Justin Azoff

More information about the Bro mailing list