[Bro-Dev] Connection Compressor

Seth Hall seth at icir.org
Mon Aug 15 09:05:19 PDT 2011

On Aug 15, 2011, at 11:53 AM, Robin Sommer wrote:

> And another piece of the story was the separate
> flood detector that starts sampling traffic from specific sources or
> destinations (Seth, is that ported already?)

Nope, but that's a perfect use case for the metrics framework (which I just got working on cluster deployments!).  I can work on it this afternoon as an example use for the metrics framework.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the bro-dev mailing list