[Bro-Dev] #608: broctl print times out if the table is too big

Bro Tracker bro at tracker.bro-ids.org
Tue Dec 13 11:10:37 PST 2011


#608: broctl print times out if the table is too big
----------------------+------------------------
  Reporter:  aashish  |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro2.0
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:
----------------------+------------------------

Comment (by seth):

 > My point is while you guys are looking at the timeout, might as well
 > look at this one too.

 Heh, similar name, very different functionality and fixes. :)

 > In catch-and-release, bro tries to restore all the dropped addresses
 > which are in Drop::drop_info table back on the acl before shutting down.
 > This can take a few mins when table size is ~5-10K

 Thanks for the explanation.  I'll have to think about that as I implement
 the reaction framework.  That's certainly the easiest way to do it, but
 I'm not sure it's the right way.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/608#comment:19>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list