[Bro] &expire_func/&create_expire question

Vern Paxson vern at icir.org
Fri Nov 17 16:43:34 PST 2006


> Real time is out, since 1s hasn't yet passed. But network time has
> advanced 91s before I see the callback!? 

Timer expiration is driven off of packet arrivals.  Is there a lengthy
lull in arriving packets that causes the 91 second delay?

		Vern



More information about the Bro mailing list