[Bro] Downside to using -b?

Thomas, Eric D edthoma at sandia.gov
Fri Sep 13 15:46:43 PDT 2013


>From what I can tell, not loading base/loading init-default.bro (using the -b option) significantly improves performance, particularly if you are not enabling a bunch of different kinds of analysis. Assuming my local.bro loads the base scripts it needs for processing, is there any reason why I wouldn't use -b?
--
Eric Thomas
edthoma at sandia.gov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130913/886bcce4/attachment.html 


More information about the Bro mailing list