[Bro-Dev] content_gap vs. ack_above_hole

[Robin Sommer]

On Fri, Nov 18, 2011 at 11:26 -0800, you wrote:

> content-gap is a superset of ack-above-hole.

(... and to add some confusion, the gap_report event is actually tied
closely to ack_above_hole, not to content_gap.)

>  processing traffic from the receiver). I think merging the two into a
>  single content_gap event would make sense.

Ok, something for the todo list.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org