[Bro-Dev] #985: 'tail -f' functionality for file reading in input framework

[Bro Tracker]

#985: 'tail -f' functionality for file reading in input framework
------------------------------+------------------------
  Reporter:  scampbell        |      Owner:
      Type:  Feature Request  |     Status:  new
  Priority:  Low              |  Milestone:  Bro2.2
 Component:  Bro              |    Version:  git/master
Resolution:                   |   Keywords:
------------------------------+------------------------

Comment (by scampbell):

 The attached patch is run against 2.1-386.  It adds an additional input
 framework option - TSTREAM to the raw reader type.

 sample usage:

 Input::add_event([$source=data_file, $reader=Input::READER_RAW,
 $mode=Input::TSTREAM, $name="issh", $fields=lineVals, $ev=sshLine]);

-- 
Ticket URL: <http://tracker.bro.org/bro/ticket/985#comment:1>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker