[Bro] Software frontend
Seth Hall
seth at icir.org
Fri Dec 10 12:17:30 PST 2010
On Dec 10, 2010, at 2:57 PM, Sunjeet Singh wrote:
> One can imagine a more optimal setting where event-analysis can be done locally and only the batched events are sent to the event-handler stage that runs on the cloud.
This is likely to just cause more overhead than it's worth.
> A cloud provider can have a Bro Instance
I can imagine doing this. I may look into it at some point too.
.Seth
More information about the Bro
mailing list