[Bro] Bro with 10Gb NIC's or higher

Seth Hall seth at icir.org
Fri Jan 9 19:11:14 PST 2015


> On Jan 9, 2015, at 4:44 PM, Li, Yee Ting <ytl at slac.stanford.edu> wrote:
> 
> i concur with Aashish; the biggest help is the shunting of large flows (and possibly encrypted flows).

Yes, this has been high on our radar for quite a while.  I suspect we’re getting closer and closer to getting this into Bro in a generic manner.  Unfortunately it just takes a lot of time and experiences to get it right.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the Bro mailing list