[Bro-Dev] #985: 'tail -f' functionality for file reading in input framework

[Bro Tracker]

#985: 'tail -f' functionality for file reading in input framework
------------------------+-----------------------------
 Reporter:  scampbell   |       Type:  Feature Request
   Status:  new         |   Priority:  Low
Milestone:  Bro2.2      |  Component:  Bro
  Version:  git/master  |   Keywords:
------------------------+-----------------------------
 With the current input framework, file data -> event translation requires
 that the entire data file be read at bro start time.  This can be
 prohibitive when the file sizes become large ( > 1GB ).

 It would be great to see a file open option that would start reading at
 the end of the file.

-- 
Ticket URL: <http://tracker.bro.org/bro/ticket/985>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker