[Bro-Dev] #949: High CPU from polling loop on low traffic links

[Bro Tracker]

#949: High CPU from polling loop on low traffic links
-------------------------+---------------------
 Reporter:  liamrandall  |       Type:  Problem
   Status:  new          |   Priority:  Low
Milestone:  Bro2.2       |  Component:  Bro
  Version:  git/master   |   Keywords:
-------------------------+---------------------
 In low or no traffic links Bro consumes a large amount of the CPU.  Bro
 has a core processing loop that it needs to do regularly which involves
 checking for packets from interfaces, checking for communication traffic
 (in the case of a cluster of Bro processes), processing scheduled events,
 etc.  It's this processing loop that is causing the CPU utilization when
 there is no traffic.

 Moving Bro to standalone mode will reduce the CPU load on sensors with out
 traffic.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/949>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker