[Bro-Dev] [Bro-Commits] [git/trace-summary] fastpath: Teach trace-summary to parse Bro's new conn.log format (closes #520) (975204a)
vern at icir.org
Thu Jul 28 11:47:15 PDT 2011
> I still haven't done the ConnSizeAnalyzer integration where I want it yet. Does it seem unreasonable to anyone to have that enabled mostly by default? I think it's useful enough that it would be enabled nearly all the time anyway.
Yeah, it strikes me as bread-&-butter info that it's sort of embarrassing
the logs historically didn't track :-P.
More information about the bro-dev