[Bro-Dev] UDP payload signatures

Robin Sommer robin at icir.org
Tue Jul 3 17:01:12 PDT 2012


On Tue, Jul 03, 2012 at 22:10 +0000, you wrote:

> I did some tests with 2,5702,400 total 1-byte (\x58) payload UDP
> packets over 25,100 connections comprised of 1,024 packets each and
> the worst performance impact I saw was a +0.2% difference when adding
> the new UDP signatures.

Cool, that sounds good.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org


More information about the bro-dev mailing list