[Bro] connection_status_update for inactive flows

[Robin Sommer]

On Fri, Feb 01, 2013 at 19:04 -0500, you wrote:

> Does the event connection_status_update fire periodically for inactive
> flows that haven't timed out yet, or just for flows that were active
> since the last connection_status_update event?

The former, activity doesn't matter.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org