[Bro-Dev] Expire in policy scripts

Gregor Maier gregor at icir.org
Thu Jan 13 14:39:41 PST 2011


I have a question regarding expire in policy scripts:

If I use:
  global rpc_calls: table[conn_id] of table[count] of rpc_call_state
       &write_expire = rpc_timeout &expire_func=expire_rpc_call;

will the expire timer be linked to the table that's indexed by conn_id
or the table that's indexed by count? Can I specify the table that
should have an expire timer?

I want the timer linked to the table indexed by count.

Gregor Maier
<gregor at icir.org>  <gregor at icsi.berkeley.edu>
Int. Computer Science Institute (ICSI)
1947 Center St., Ste. 600
Berkeley, CA 94704, USA

More information about the bro-dev mailing list