[Bro] Protocol decoder

Robin Sommer robin at icir.org
Wed Feb 4 08:28:03 PST 2015



On Wed, Feb 04, 2015 at 15:54 +0100, Emmanuel TORQUATO wrote:

> I would like to know what is the best approach for protocol decoder. Is it better to use BinPAC or BinPAC++ ?

I would say it depends on your use case. If it's indeed "production",
then BinPAC. BinPAC++ is still in prototype state. If you're just
experimenting with some protocol though, it can make sense to give it
a try.

> When does BinPAC++ will be supported for production?

Unclear, there's signficant work left. It's at the state where the
research work has concluded and produced a solid prototype, but taking
it to production will require additional resources that we don't have
right now unfortunately.

Robin

-- 
Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin


More information about the Bro mailing list