[Bro] LogExpireInterval not respected?

[Jesse Bowling]

Yes, but not the DNA drivers...

On Wed, Feb 13, 2013 at 1:42 PM, Seth Hall <seth at icir.org> wrote:

>
> On Feb 13, 2013, at 12:55 PM, Jesse Bowling <jessebowling at gmail.com>
> wrote:
>
> > That is my understanding. Anything built against PF_RING's libpcap can
> use the notation...However, now that I've put it out on the internet and
> it's not apparently common knowledge, I'm doubting myself... ;)
> >
> > As a reference, straight from (one of) the horses mouths:
> http://lists.ntop.org/pipermail/ntop-misc/2012-August/003128.html
>
> And you are using the pf_ring aware drivers?
>
>   .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>
>


-- 
Jesse Bowling
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130213/1ecb245c/attachment.html