[Bro-Dev] 'async' update and proposal

Robin Sommer robin at icir.org
Tue Jan 30 09:08:20 PST 2018



On Tue, Jan 30, 2018 at 10:28 -0600, you wrote:

> Was there more benefit of using the predefined choice than saving the
> overhead of calling out to script-land to do the context calculation?

No, don't think so. It mainly came out of an analysis of existing
scripts, and those 5-tuple based subsets were the main use case
anways. Actually I'm not even sure anymore if there might have been a
custom execute-my-own-function scope as well, I'll see if I can find
the old code somewhere.

Robin

-- 
Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin


More information about the bro-dev mailing list