[Bro] high cpu usage and strange select(2) behavior

[Robin Sommer]

Coming late to this thread, two remarks:

    - Bro's I/O loop definitly needs some work, there's some stuff in
      there that's clearly suboptimal. High CPU load with low traffic
      is one of them.

    - That said, while some things may look odd, there are reasons for
      why it's done this way. It's mostly platform artifacts: at the
      time the code was written, non-blocking pcap file descriptors
      weren't (correctly) supported on some OSs; and sometimes capture
      performance turned out to be better with a less intuitive
      version of the code.

Reworking this is on the todo list but it needs care to not make
things worse.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org