[Bro] Bytes in conn.log is way to large

Robin Sommer robin at icir.org
Fri Nov 2 16:23:11 PDT 2007


On Fri, Nov 02, 2007 at 20:44 +0100, Gregor Maier wrote:

> * a "maximum bandwidth" a connection must not exceed

Yeah, various post-processing scripts are using such heuristics to
avoid the problem when analyzing connection logs.

Robin

-- 
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list