[Bro-Dev] Bro byte and packet counting in devel

Gregor Maier gregor at icir.org
Tue Mar 8 09:33:27 PST 2011

On 3/8/11 9:13 , Vern Paxson wrote:
>> [or]size is in the endpoint record.  I think you may be thinking of the
>> large-conns.bro script that calculates an upper and lower bound for the
>> connection size.
> Yep, exactly.  I grepped around for osize/rsize and didn't find it.  In
> fact, I'm still not finding it.  So is this an informal term, or am I not
> looking in the right place?

I guess it's indeed an informal term then. I guess I've been using it so
frequently in my scripts, etc. that I've assumed it's a common term.


Gregor Maier
<gregor at icir.org>  <gregor at icsi.berkeley.edu>
Int. Computer Science Institute (ICSI)
1947 Center St., Ste. 600
Berkeley, CA 94704, USA

More information about the bro-dev mailing list