[Bro-Dev] Runtime increases

Robin Sommer robin at icir.org
Fri Jan 16 15:39:05 PST 2015



On Fri, Jan 16, 2015 at 18:09 +0000, you wrote:

> When I measured timing differences caused by adding file reassembly,
> it was usually around +1%.

Do you understand where that increase is coming from? Is it indeed
because Bro is doing additional reassembly work now? In other words,
it's not overhead incurred on traffic that does't require reassembly?

Robin

-- 
Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin


More information about the bro-dev mailing list