[Bro-Dev] Bro byte and packet counting in devel
Gregor Maier
gregor at icir.org
Tue Mar 8 09:33:27 PST 2011
On 3/8/11 9:13 , Vern Paxson wrote:
>> [or]size is in the endpoint record. I think you may be thinking of the
>> large-conns.bro script that calculates an upper and lower bound for the
>> connection size.
>
> Yep, exactly. I grepped around for osize/rsize and didn't find it. In
> fact, I'm still not finding it. So is this an informal term, or am I not
> looking in the right place?
I guess it's indeed an informal term then. I guess I've been using it so
frequently in my scripts, etc. that I've assumed it's a common term.
cu
gregor
--
Gregor Maier
<gregor at icir.org> <gregor at icsi.berkeley.edu>
Int. Computer Science Institute (ICSI)
1947 Center St., Ste. 600
Berkeley, CA 94704, USA
http://www.icir.org/gregor/
More information about the bro-dev
mailing list