[Bro-Dev] libbroker status/plans

[Seth Hall]

On Oct 23, 2014, at 11:41 AM, Siwek, Jon <jsiwek at illinois.edu> wrote:

> it may just push the overload problem to the sender(s) and begs the question of what they do if they can’t artificially slow down?

With regards to logging, I think this is one area where you can cheat a bit and just push back at scriptland to give script developers a chance to know if a logging queue is getting backed up.  There are a number of ways we could deal with overload situations there.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/