[Bro-Dev] Runtime increases

Seth Hall seth at icir.org
Mon Jan 19 07:25:17 PST 2015

> On Jan 18, 2015, at 10:41 AM, Siwek, Jon <jsiwek at illinois.edu> wrote:
> Interesting that for the same default_file_bof_buffer_size, the new version of Bro w/ file reassembly is actually better.

I suspect it’s because I modified the low level handling of files.  The flow of chunks when they first enter the file analysis framework is quite different now.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the bro-dev mailing list