[Bro-Dev] trace-summary question

Gilbert Clark gc355804 at ohio.edu
Fri Aug 5 11:30:17 PDT 2011


 From trace-summary:

        if duration and  payload_resp * 8 / (1024 * 1024 * duration) > 
700:                                                                                                                                    

            # Bandwith exceed due to Bro 
bug.                                                                                                                                                                  

            if Options.conn_version == 
1:                                                                                                                                                                      

                print >>sys.stderr, "%.6f originator exceeds bandwith" % 
time                                                                                                                                  

            
else:                                                                                                                                                                                              

                print >>sys.stderr, "UID %s originator exceeds bandwith" 
% 
f[uid_idx]                                                                                                                          

            payload_resp = 0

Just curious: is there a good reason for '700'?

--Gilbert



More information about the bro-dev mailing list