[Bro-Dev] #724: Changing semantics of ConnSizeAnalyzer

Bro Tracker bro at tracker.bro-ids.org
Wed Dec 14 13:35:57 PST 2011


#724: Changing semantics of ConnSizeAnalyzer
----------------------+--------------------
  Reporter:  seth     |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  High     |  Milestone:  Bro2.0
 Component:  Bro      |    Version:
Resolution:           |   Keywords:
----------------------+--------------------

Comment (by gregor):

 Sounds good.
 However, as a measurement guy I like the IP level bytes. How about
 counting both payload and IP level bytes? (It's fine if we only report the
 payload bytes per default, but I'd really like to keep support for IP
 level counting in the core)

 -Gregor

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/724#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list