[Bro-Dev] Runtime increases
robin at icir.org
Fri Jan 16 15:39:05 PST 2015
On Fri, Jan 16, 2015 at 18:09 +0000, you wrote:
> When I measured timing differences caused by adding file reassembly,
> it was usually around +1%.
Do you understand where that increase is coming from? Is it indeed
because Bro is doing additional reassembly work now? In other words,
it's not overhead incurred on traffic that does't require reassembly?
Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin
More information about the bro-dev