[Bro-Dev] [JIRA] (BIT-1353) BroCtl status/top take excessive amount of time

Johanna Amann johanna at icir.org
Mon Mar 23 14:22:32 PDT 2015


On Mon, Mar 23, 2015 at 04:15:12PM -0500, Daniel Thayer wrote:
> When you do a broctl status, does it show a status line for every Bro
> node in your cluster?

Yes, it does. At least I think so, the number is quite large :)

> How are you running broctl status:
> 1) just by typing "broctl status", or
> 2) by running "broctl", then type the "status" command at the BroControl
> prompt.

I run broctl first and then type status.

> When you run "broctl status", it must establish an ssh session to
> every remote machine, which could take awhile when there are 28
> machines.  However, when you run just "broctl", then type "status"
> at the BroControl prompt, it keeps the ssh sessions open, so the 2nd
> time you type "status" should be faster than the 1st time (because
> the 2nd time it doesn't need to do the ssh connections).

There does not seem to be a big speed difference between the first time
and the second time status is run.

Johanna


More information about the bro-dev mailing list