[Bro-Dev] [Bro-Commits] [git/bro] topic/jsiwek/experimental-faf: FileAnalysis: buffer input that can't get unique file handle immediately (637fe69)

[Robin Sommer]

On Thu, Mar 14, 2013 at 09:02 -0700, Jonathan Siwek wrote:

>     FileAnalysis: buffer input that can't get unique file handle immediately

Once you have the basic infrastructure in place, can you add logging
to prof.log that records stats on the current state of the file
analysis (things like current # handles, total number # handles so
far, data buffered vs non-buffered, data in reassembler (once that's
there) etc.; maybe break it down by analyzer as well). That'll be
helpful for both understanding performance and potentially debugging
if something goes wrong.

Robin


-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org