[Bro] Bro for embedded use?

[Jordi Ros-Giralt]

Hi Alex,

We are running Bro on a couple of multicore embedded platforms (Cavium
and Tilera).  These are resourceful platforms (with lots of light
cores, up to 64 cores) and lots of memory.  So it may not be the best
example for you, but let me know.

Thanks,
Jordi



On Mon, Jul 23, 2012 at 4:58 PM, Alex Tarter <Alex.Tarter at ultra-3eti.com> wrote:
> Hey everyone,
>
>
>
> I’m currently looking at the effectiveness of using Bro in an embedded
> platform. We’re just going through the process of just getting everything
> (including all of the libraries) compiled into our build – and we’ve found
> that with all the dependencies the resultant package is pretty large!
>
>
>
> Has anyone had any experience using Bro in an embedded system?
>
>
>
> Because we haven’t got it running yet without crashing, we can’t assess the
> extra resource footprint required for Bro. In general (with limited scripts,
> not handling a large number of connections, sub 1Mbps throughput), what are
> the memory/cycle requirements for Bro? I realize that there are a large
> number of variables here so I’m not looking for an exact answer, more of a
> ball-park gut feeling one J
>
>
>
> Thanks in advance,
>
>
>
> Alex
>
>
>
>
>
>
>
>
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro