[Bro] Load Single Column Table with Input Framework

[Seth Hall]

On Nov 6, 2013, at 1:30 PM, anthony kasza <anthony.kasza at gmail.com> wrote:

> This is a bother when running Bro on trace files. Bro will finish processing a trace before reading in an entire table. One hack is to build the table in a separate file and @load it.

We also have the exit_only_after_terminate variable to prevent Bro from terminating automatically.  You will have to manually kill it if you set this.

redef exit_only_after_terminate = T;

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131106/606771e0/attachment.bin