[Bro-Dev] Bro + real-time question

Vern Paxson vern at icir.org
Sun Sep 28 10:25:28 PDT 2014

> Does anyone know of work that involves placing hard limits on the amount 
> of time bro is able to spend processing individual packets? 

Can you sketch your use case?  Different concerns (in particular, adversarial
threats versus performance problems) have different implications.


More information about the bro-dev mailing list