[Bro] Stepping Stone Detection

[Robin Sommer]

On Tue, Sep 23, 2014 at 09:08 -0500, Vlad Grigorescu wrote:

> If I recall correctly, I believe the detection doesn't work well on
> clusters.

Yeah, that's one problem. Another (related) is that conceptually the
stepping stone detector is hardcoded into the core system, rather than
implemented at script-land as pretty much evertthing else is.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 *     robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 * www.icir.org/robin