timing out Bro state

Robin Sommer robin at icir.org
Wed Jul 17 15:05:53 PDT 2002


On Wed, Jul 17, 2002 at 00:02 -0700, shi wu wrote:

> about timing out Bro state , or Could tell me how
> timing out Bro state fast? pipeline? UNIX pipe? let
> another process do these work?

It works on the script level: There are table attributes that you
can use to specify how long entries are to be kept. Expired entries
are then removed from the table automatically.

This will be included in the next release of Bro.

Robin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20020718/76de0843/attachment.bin 


More information about the Bro mailing list