[Bro-Dev] #608: broctl print times out if the table is too big

Bro Tracker bro at tracker.bro-ids.org
Tue Dec 13 10:27:47 PST 2011


#608: broctl print times out if the table is too big
----------------------+------------------------
  Reporter:  aashish  |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro2.0
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:
----------------------+------------------------

Comment (by seth):

 > Additionally, It would be good to have a adjustable timeout when bro is
 > stopped or restarted using broctl. I have noticed that even though
 > bro_done is not finished, after the timeout, bro process is killed. This
 > results in some stale state on the acld.  I can provide more specifics
 > or create another ticket for it.

 That's a different timeout.  The timeout option that Jon was talking about
 is related to how long broctl will wait for python-broccoli events to
 return.    I think that the larger problem we need to ask is why Bro is
 taking so long to shutdown.  What are you finding that Bro is spending so
 much time doing in the bro_done event?

 > Btw, how do I configure these timeouts once support is built for it ?

 From checking the commit Jon did, it looks like CommTimeout in broctl.cfg.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/608#comment:17>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list