[Bro-Dev] Bro + real-time question

Vern Paxson vern at icir.org
Tue Sep 30 09:10:51 PDT 2014


> ... but if my quick skim is correct, this paper is where the old
> load-level.bro script came from, right?

Yes, basically.  That paper documents a bunch of our experiences, including
load-level.  I think we wound up being torn between the need for it versus
the notion "if you need it, what you really need is a bigger cluster".

		Vern


More information about the bro-dev mailing list