[Bro-Dev] Bro + real-time question

Aashish Sharma asharma at lbl.gov
Fri Sep 26 12:58:37 PDT 2014


> * work toward putting hard limits on the number of cycles Bro is allowed 
> to execute per-packet before injecting a hard stop and forcing the 
> engine to move to the next packet, or

I believe it the value of : watchdog_interval 

Aashish 


On Fri, Sep 26, 2014 at 03:33:25PM -0400, Gilbert Clark wrote:
> Hi list:
> 
> Does anyone know of work that involves placing hard limits on the amount 
> of time bro is able to spend processing individual packets? 
> Specifically, I'm looking for:
> 
> * work toward putting hard limits on the number of cycles Bro is allowed 
> to execute per-packet before injecting a hard stop and forcing the 
> engine to move to the next packet, or
> * work toward emulating buffers / drops based on the number of cycles 
> bro spends processing a particular packet in offline / pseudo-realtime mode
> 
> Thanks in advance for any references / thoughts!
> 
> --Gilbert
> 
> _______________________________________________
> bro-dev mailing list
> bro-dev at bro.org
> http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

-- 
Aashish Sharma	(asharma at lbl.gov) 				 
Cyber Security, 
Lawrence Berkeley National Laboratory  
http://go.lbl.gov/pgp-aashish 
Office: (510)-495-2680  Cell: (510)-612-7971
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20140926/90639e7d/attachment.bin 


More information about the bro-dev mailing list