[Bro-Dev] Connection Compressor

Vern Paxson vern at icir.org
Mon Aug 15 08:42:55 PDT 2011

> I've done some measurements as well now and can confirm this. With
> master in default mode, I also see only tiny savings in time and
> memory.

So just to confirm: for a high-speed SYN flooding attack, it's not much
help?  That was the original motivation, after all.


More information about the bro-dev mailing list