[Bro-Dev] [JIRA] (BIT-1215) bro-cut should be rewritten in C for speed and to not depend on gawk

[Daniel Thayer (JIRA)]

Daniel Thayer created BIT-1215:
----------------------------------

             Summary: bro-cut should be rewritten in C for speed and to not depend on gawk
                 Key: BIT-1215
                 URL: https://bro-tracker.atlassian.net/browse/BIT-1215
             Project: Bro Issue Tracker
          Issue Type: Improvement
          Components: bro-aux
            Reporter: Daniel Thayer
             Fix For: 2.4


The current implementation of bro-cut is too slow when processing large log files (takes more than a minute to process a single log file a few hundred MB in size).  Justin Azoff rewrote bro-cut in C and found that it runs an order of magnitude faster.  Another benefit of a C version of bro-cut is that we will no longer depend on gawk for anything (and some of Bro's supported platforms do not include gawk by default).




--
This message was sent by Atlassian JIRA
(v6.3-OD-08-005-WN#6328)