[Bro] how to get the oldest entry out of table

Christian Kreibich christian.kreibich at cl.cam.ac.uk
Mon Feb 7 15:20:02 PST 2005


Hi Christoph,

On Mon, 2005-02-07 at 16:23 +0000, Christoph Göldi wrote:
>
> is vector a new type which is not documented in the bro ref manual?

not really new, but not well documented either. Check the CHANGES file.

> however, what you suggest doesn't solve my problem, because i have no
> chance to expire and delete each entry in the table individually. i can only
> delete all entries of one addr at the same time with the expire
> attribut for tables.

Maybe we could help you better if you explained your problem setting a
bit. It sounds like what you'd like to have is a priority queue instead
of a basic table with expiration timers?

Cheers,
Christian.
-- 
________________________________________________________________________
                                          http://www.cl.cam.ac.uk/~cpk25
                                                    http://www.whoop.org






More information about the Bro mailing list