[Bro-Dev] libbroker status/plans

Seth Hall seth at icir.org
Thu Oct 23 09:04:47 PDT 2014

On Oct 23, 2014, at 11:41 AM, Siwek, Jon <jsiwek at illinois.edu> wrote:

> it may just push the overload problem to the sender(s) and begs the question of what they do if they can’t artificially slow down?

With regards to logging, I think this is one area where you can cheat a bit and just push back at scriptland to give script developers a chance to know if a logging queue is getting backed up.  There are a number of ways we could deal with overload situations there.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the bro-dev mailing list