[Bro] Bro state implementation

[Robin Sommer]

On Tue, Apr 01, 2008 at 16:27 +0530, you wrote:

> What is the behaviour of Bro when "suspend_processing" is called. What i
> have observed is Bro is buffering packets in suspended state.

No, it's not buffering packets, it just stops processing them (i.e.,
the kernel will drop packets once its internal buffers are
exhausted). 

What are you using suspend_processing() for?

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org