[Bro-Dev] #608: broctl print times out if the table is too big

Bro Tracker bro at tracker.bro-ids.org
Tue Dec 13 10:08:30 PST 2011


#608: broctl print times out if the table is too big
----------------------+------------------------
  Reporter:  aashish  |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro2.0
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:
----------------------+------------------------

Comment (by aashish):

 Jon, Seth: Thanks for taking care of this issue. We are building some
 checkpoint scripts around "broctl print" functionality so this is a
 useful feature.

 Additionally, It would be good to have a adjustable timeout when bro is
 stopped or restarted using broctl. I have noticed that even though
 bro_done is not finished, after the timeout, bro process is killed. This
 results in some stale state on the acld.  I can provide more specifics
 or create another ticket for it.

 Btw, how do I configure these timeouts once support is built for it ?

 Thanks
 Aashish


 On Tue, Dec 13, 2011 at 05:19:03PM -0000, Bro Tracker wrote:
 > #608: broctl print times out if the table is too big
 > ----------------------+------------------------
 >   Reporter:  aashish  |      Owner:
 >       Type:  Problem  |     Status:  new
 >   Priority:  Normal   |  Milestone:  Bro2.0
 >  Component:  Bro      |    Version:  git/master
 > Resolution:           |   Keywords:
 > ----------------------+------------------------
 >
 > Comment (by jsiwek):
 >
 >  The timeout in BroControl is hardcoded at 10 seconds, I was only able
 to
 >  get a 10K-entry table to timeout when I changed it to 2 seconds, but if
 I
 >  suppose it depends on environment.  I'm going to make the timeout
 interval
 >  a configurable option, let me know if there's other ideas.
 >
 > --
 > Ticket URL: <http://tracker.bro-ids.org/bro/ticket/608#comment:12>
 > Bro Tracker <http://tracker.bro-ids.org/bro>
 > Bro Issue Tracker

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/608#comment:16>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list