[Bro-Dev] Runtime increases

Seth Hall seth at icir.org
Mon Jan 19 07:25:17 PST 2015


> On Jan 18, 2015, at 10:41 AM, Siwek, Jon <jsiwek at illinois.edu> wrote:
> 
> Interesting that for the same default_file_bof_buffer_size, the new version of Bro w/ file reassembly is actually better.

I suspect it’s because I modified the low level handling of files.  The flow of chunks when they first enter the file analysis framework is quite different now.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the bro-dev mailing list