[Bro-Dev] libbroker status/plans
seth at icir.org
Thu Oct 23 09:04:47 PDT 2014
On Oct 23, 2014, at 11:41 AM, Siwek, Jon <jsiwek at illinois.edu> wrote:
> it may just push the overload problem to the sender(s) and begs the question of what they do if they can’t artificially slow down?
With regards to logging, I think this is one area where you can cheat a bit and just push back at scriptland to give script developers a chance to know if a logging queue is getting backed up. There are a number of ways we could deal with overload situations there.
International Computer Science Institute
(Bro) because everyone has a network
More information about the bro-dev