[Bro-Dev] Bro + real-time question

Gilbert Clark gc355804 at ohio.edu
Sun Sep 28 13:20:04 PDT 2014


Aashish: not quite what I'm looking for, but I do appreciate the link!  
I would be looking for something with higher resolution (usec / msec) 
that doesn't stop bro when the timer fires.

Vern: yeah, that's still the case as far as I know.

Thanks all!

-Gilbert

On 9/27/2014 3:43 PM, Vern Paxson wrote:
>> I believe it the value of : watchdog_interval
> Unless things have changed, that instead is a global timer which kills Bro
> (rather than skipping to the next packet) if that much time has elapsed
> and it hasn't gotten past the current packet..  The notion is that Bro has
> become wedged and needs a hard recovery.
>
> 		Vern



More information about the bro-dev mailing list