[Bro] LogExpireInterval not respected?

[Seth Hall]

On Feb 13, 2013, at 12:55 PM, Jesse Bowling <jessebowling at gmail.com> wrote:

> That is my understanding. Anything built against PF_RING's libpcap can use the notation...However, now that I've put it out on the internet and it's not apparently common knowledge, I'm doubting myself... ;)
> 
> As a reference, straight from (one of) the horses mouths: http://lists.ntop.org/pipermail/ntop-misc/2012-August/003128.html

And you are using the pf_ring aware drivers?

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/