[Bro] Tuning Bro

Robin Sommer robin at icir.org
Fri Jul 20 10:39:09 PDT 2012


Btw, you may have already found these, but for some context on how Bro
does things internally, I suggest reading the original Bro paper [1]
and also a later one on resource management [2]. Both are a bit dated
in their specifics by now, but conceptually they still apply.

Robin

[1] http://www.icir.org/vern/papers/bro-CN99.pdf
[2] http://www.icir.org/robin/papers/ccs04.ps


-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list