[Bro-Dev] Bro + real-time question
Aashish Sharma
asharma at lbl.gov
Fri Sep 26 12:58:37 PDT 2014
> * work toward putting hard limits on the number of cycles Bro is allowed
> to execute per-packet before injecting a hard stop and forcing the
> engine to move to the next packet, or
I believe it the value of : watchdog_interval
Aashish
On Fri, Sep 26, 2014 at 03:33:25PM -0400, Gilbert Clark wrote:
> Hi list:
>
> Does anyone know of work that involves placing hard limits on the amount
> of time bro is able to spend processing individual packets?
> Specifically, I'm looking for:
>
> * work toward putting hard limits on the number of cycles Bro is allowed
> to execute per-packet before injecting a hard stop and forcing the
> engine to move to the next packet, or
> * work toward emulating buffers / drops based on the number of cycles
> bro spends processing a particular packet in offline / pseudo-realtime mode
>
> Thanks in advance for any references / thoughts!
>
> --Gilbert
>
> _______________________________________________
> bro-dev mailing list
> bro-dev at bro.org
> http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
--
Aashish Sharma (asharma at lbl.gov)
Cyber Security,
Lawrence Berkeley National Laboratory
http://go.lbl.gov/pgp-aashish
Office: (510)-495-2680 Cell: (510)-612-7971
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20140926/90639e7d/attachment.bin
More information about the bro-dev
mailing list