[Bro-Dev] Runtime increases
seth at icir.org
Mon Jan 19 07:25:17 PST 2015
> On Jan 18, 2015, at 10:41 AM, Siwek, Jon <jsiwek at illinois.edu> wrote:
> Interesting that for the same default_file_bof_buffer_size, the new version of Bro w/ file reassembly is actually better.
I suspect it’s because I modified the low level handling of files. The flow of chunks when they first enter the file analysis framework is quite different now.
International Computer Science Institute
(Bro) because everyone has a network
More information about the bro-dev