[Bro-Dev] #591: Time to finish collecting stats

Bro Tracker bro at tracker.bro-ids.org
Fri Sep 2 22:08:21 PDT 2011


#591: Time to finish collecting stats
------------------------+--------------------
 Reporter:  seth        |      Owner:
     Type:  Problem     |     Status:  new
 Priority:  Normal      |  Milestone:  Bro1.6
Component:  BroControl  |    Version:
 Keywords:  beta        |
------------------------+--------------------
 I've run into several cases now where the stats part of broctl's cron
 command either takes too long to process or gets wedged somehow.  We
 should probably add a timer to the stats collection so that if it takes
 longer than some configurable default (1 minute maybe?) everything is
 killed off and the stats collection is given up on.

 What I ran into just now is that capstats may not be compatible with
 pf_ring's libpcap wrapper.  The process just sits and never finishes.
 This results in the cron command never being able to do it's job and makes
 it nearly impossible to use broctl at all since the never-dying cron
 command is holding onto a lock forever.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/591>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list