[Bro-Dev] Bro + real-time question

[Robin Sommer]

On Tue, Sep 30, 2014 at 10:08 -0700, you wrote:

> Its also interesting to read that connection timers are only disabled at
> connection state removal. Are they periodically removed similar to hash
> table resizing in figure 3?

If I recall that correctly, they used to be only disabled, but then
the change was to actually now remove them immediately to avoid
accumulating stale timers in memory. A single removal is pretty fast
due to the underlying data structure, and these operations amortize
over time, with no need for something like the hash table resizing.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 *     robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 * www.icir.org/robin