[Bro-Dev] Connection Compressor

[Seth Hall]

On Aug 15, 2011, at 11:53 AM, Robin Sommer wrote:

> And another piece of the story was the separate
> flood detector that starts sampling traffic from specific sources or
> destinations (Seth, is that ported already?)

Nope, but that's a perfect use case for the metrics framework (which I just got working on cluster deployments!).  I can work on it this afternoon as an example use for the metrics framework.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/