[Bro] how many sensitive domains?

[scott campbell]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Smith, Stephen G., OIG DoD wrote:
> I'm looking at needing to put ~400 entries in the sensitive lookup table.
> Does anyone know whether Bro will be able to handle this without freaking,
> and has anyone done this many on their own system?
> 
>  
> 
> Thanks,
> 
> Steve
> 
>  
> 
> --
> 
> Stephen G. Smith
> 
> DODIG NETSEC Division
> 
> stephen.smith at dodig.mil
> 
>  
> 
> 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

I have an instance of bro with a table that contains O(22k) entries, and
there seems to be no ill effect on the system at all.  As this table is
part of the bottom half of the main loop in the check_scan() function,
it is exercised well.

good luck!

scott
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org

iD8DBQFE43STK2Plq8B7ZBwRAgssAKCcqWsJSREc6+otd1xWKdHAHI+aBwCfa7+f
VFv4//r+R3XmAdPwvSXoHwg=
=cbSH
-----END PGP SIGNATURE-----